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The First 109 Minutes: 9/11 and the U.S. Air Force 



Introduction 

Tuesday, September 11, 2001, dawned cool and clear, with sunny skies all 
along the eastern seaboard. For Air Force aviators like Lt. Col. Timothy "Duff" 
Duffy of the 102d Fighter Wing at Otis Air National Guard Base, Massachu- 
setts, the day held the promise of perfect flying weather, at a time when the U.S. 
civil aviation system was enjoying a period of relative peace, despite concerns 
about a growing terrorist threat. More than ten years had passed since the last hi- 
jacking or bombing of a U.S. air carrier. That morning, however, the country 
came under a shocking, coordinated aerial assault by nineteen al Qaeda 1 hi- 
jackers at the direction of the network's leader and cofounder, Islamist extrem- 
ist Osama bin Laden (1957/1958-2011). 2 The attack plan carried out by the 
suicide operatives had been years in the making. It was intended to cause mass, 
indiscriminate casualties and to destroy or damage the nation's financial, mili- 
tary, and political centers, four high-value U.S. targets selected by bin Laden, in- 
dependent operator Khalid Sheikh Mohammed, and al Qaeda operations chief 
Mohammed Atef. 3 Analysts in the United States immediately recognized the 
historic nature of the strikes, 4 launched without warning against targets in New 
York City and Washington, D.C., and compared them to another deadly surprise 
aerial attack against the United States almost sixty years earlier. 5 The December 
7, 1941, assault by Japanese forces on the U.S. naval base at Pearl Harbor had 
been the most devastating attack against U.S. territory by a foreign adversary 
until the morning of September 11, 2001. 6 

The four al Qaeda hijacker-pilots and their teams commandeered the four 
fuel-laden commercial jets in which they were passengers and intentionally 
crashed them into 1 and 2 World Trade Center, in New York City; the Pentagon, 
in Arlington, Virginia; and an empty field in Shanksville, Pennsylvania. This 
final hijacking, of United Airlines Flight 93, fell short of its intended target in 
Washington, D.C., because of heroic efforts by its passengers to take back con- 
trol of the aircraft. The 9/11 attack, which began with the hijacking of American 
Airlines Flight 11 and was followed by the hijackings of United Airlines Flight 
175, American Airlines Flight 77, and United Airlines Flight 93, would become, 
over the next two and a quarter hours, the deadliest, costliest terrorist strike in 
U.S. history. The 109-minute attack period itself began when American Airlines 
Flight 11 was attacked at or just after 8:14 a.m. Eastern Daylight Time (EDT). 
It ended when United Airlines Flight 93 crashed at 10:03 a.m. EDT, but the loss 
of life did not. By the time 1 World Trade Center, North Tower, collapsed at 
10:28 a.m. EDT, almost three thousand people had been killed or were dying; the 
financial center of the United States had been reduced to burning, toxic rubble; 
the iconic symbol of the military strength of the country had been severely dam- 
aged; the tranquility of a field in Pennsylvania had been shattered; U.S. Air Force 
and Air National Guard fighter aircraft had set up combat air patrols over Wash- 
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ington, D.C., and New York City; and the administration of President George W. 
Bush and the Department of Defense (DOD) had begun shifting major resources 
of the federal government and military services to a new national priority, home- 
land defense. 7 

Even while the attacks were underway, it was clear that the country faced 
an unprecedented challenge. On the floor of the command center at the North 
American Aerospace Defense Command's (NORAD) Northeast Air Defense 
Sector (NEADS) in Rome, New York, SMSgt. Steve Bianchi, an assistant to 
mission crew commander Maj. Kevin J. Nasypany, reflected: "This is a new 
type of war." 8 And suddenly, as Vice President Richard Cheney noted a few days 
after the attacks, the country's national leadership had to consider a new mission 
for U.S. Air Force pilots: the possible shoot-down of commercial passenger air- 
craft filled with U.S. citizens. 9 

The terrorist attacks of September 11, 2001, had a profound impact on the 
nation's economy and governmental organization; on its budgets for national 
defense; and on the mission of its armed forces, particularly the U.S. Air Force. 
Even the date — 9/11 — quickly became iconic, and without the hijackings, the 
first three major U.S. military operations of the new century would not have 
been launched: Operation Noble Eagle, Operation Enduring Freedom, and Op- 
eration Iraqi Freedom. The U.S. Air Force has played an important role in all 
three. The 9/11 attacks precipitated the launch of Operation Noble Eagle and 
obliged the U.S. Air Force to deploy forces to protect the continental United 
States, Alaska, Canada, Hawaii, and Guam against additional air attacks. 

The nature, timing, and effectiveness of the air defense response initiated 
by the Northeast Air Defense Sector on the morning of September 1 1 depended 
on many factors. Several were partly or entirely outside the control of the U.S. 
Air Force, such as the speed of the attacks and the tactics of the hijackers; the 
knowledge, experience, intuition, and initiative of Federal Aviation Adminis- 
tration (FAA) personnel; and the involvement and actions of those higher up the 
civilian chain of command. But the air defense response depended perhaps most 
on the effectiveness of the communications, coordination, and interaction within 
and between the FAA on the one hand and NORAD and NEADS on the other. 10 

NORAD Air Defense Structure on 9/11 

On September 11, 2001, the North American Aerospace Defense Com- 
mand, based at Peterson Air Force Base, Colorado, under the command of Gen. 
Ralph E. Eberhart, oversaw three air defense regions, which were responsible for 
protecting the airspace over Alaska, Canada, and the continental United States. 
The last of these, the Continental United States NORAD Region (CONR), under 
the command of the dual-hatted commander of First Air Force, Maj . Gen. Larry 
K. Arnold, oversaw the Northeast, the Western, and the Southeast Air Defense 
Sectors. The locations of the departures, flight paths, and crash sites of the four 
aircraft hijacked on September 11, 2001, were all in the Northeast Air Defense 
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Sector, commanded by Col. Robert K. Marr (see Diagram, NORAD Air De- 
fense Structure on 9/11, p 53). 

On September 11, 2001, the responsibility for defending continental U.S. 
airspace rested with only fourteen fighter aircraft at seven air defense alert sites 
across the country. 1 1 Based in Rome, New York, the Northeast Air Defense Sec- 
tor had only two alert sites on which to call — Otis Air National Guard Base in 
Cape Cod, Massachusetts, and Langley Air Force Base in Hampton, Virginia. 
Each site had two designated alert fighters on duty twenty-four hours a day, 
seven days a week. Many other fighter aircraft were based across the country, 
but they were not NORAD assets, and it would take time to arm them and or- 
ganize their crews. 12 

Earlier, far larger numbers of U.S. Air Force aircraft had provided air de- 
fense for the entire nation. The post- World War II chill in relations between the 
United States and the Soviet Union, the expansion of the Soviet long-range 
bomber fleet, and the detonation in 1949 of a Soviet atomic bomb contributed 
to the evolution of the continental air defense mission and its dedicated fighter 
force in the United States. Established in 1957, the joint U.S. -Canadian North 
American Air Defense Command, as it was then called, was responsible for in- 
tercepting any Soviet long-range bombers that might attack the Northern Hemi- 
sphere. The command's forces numbered about twelve hundred interceptors by 
1960. The number of alert fighters and alert sites changed as the Soviet military 
threat evolved. In light of increased Soviet reliance on ballistic missiles over 
manned bombers beginning in the early 1960s, and because of budget con- 
straints, the Department of Defense had by the mid-1970s reduced the number 
of NORAD interceptors to about three hundred. The number of alert sites and 
alert fighters continued to drop as the breakup of the Soviet Union and the dis- 
solution of the Warsaw Pact in 1991 greatly diminished the threat of nuclear at- 
tack, which NORAD 's core structure had been developed to counter. Thereafter, 
NORAD strategists began to consider shifting the mission from air defense 
against nuclear attack to defending the United States and Canada by maintain- 
ing peacetime air sovereignty. This meant "providing surveillance and control 
of the territorial airspace." To do so, NORAD air sovereignty fighters would 
carry out a number of missions. These included "intercepting and destroying 
uncontrollable air objects; tracking hijacked aircraft; assisting aircraft in dis- 
tress; . . . and intercepting suspect aircraft, including counterdrug operations and 
peacetime military intercepts." In the early years after the fall of the Soviet 
Union, NORAD's leaders believed that the command's most pressing mission 
was intercepting drug smugglers. But, in fact, the largest percentage of alert 
sites' total activity involved assisting aircraft in distress and inspecting uniden- 
tified aircraft. 13 

In February 1993, Gen. Colin L. Powell, U.S. Army, the Chairman of the 
Joint Chiefs of Staff (CJCS), determined that because of the greatly lessened 
Soviet threat "the United States no longer needed a large, dedicated air defense 
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force." 14 He therefore recommended that the number of dedicated Air National 
Guard units assigned to the continental air defense mission "be sharply reduced 
or eliminated" and that the mission be carried out "by dual tasking existing ac- 
tive and reserve general-purpose fighter and training squadrons in the Air Force, 
the Navy, and the Marine Corps." 15 In a report sent on May 3, 1994, to the chair- 
men of the U.S. Senate and U.S. House armed services committees and sub- 
committees on defense appropriations, the General Accounting Office — as the 
General Accountability Office was then called — supported Powell's recom- 
mendations, concluding, "A dedicated continental air defense force is no longer 
needed." 16 

Overview of the 9/11 Attacks and Summary of the Air Defense Response 

The 9/11 terrorist attacks engendered the classic fog of war, in the air and 
on the ground. The government's longstanding antihijacking protocol, which set 
out the roles and responsibilities of the Federal Aviation Administration and the 
North American Aerospace Defense Command in the event of air piracy, was ei- 
ther bypassed or lost along its way to the Office of the Secretary of Defense. 
Amidst the chaos and violence of that morning, the U.S. Air Force played a 
prominent role in reacting to the attacks, as service personnel labored in the face 
of the nation's deadliest surprise attack since Pearl Harbor to defend the coun- 
try against multiple commandeered aircraft and additional suspected hijackings. 

Of critical importance to an effective air defense response was timely no- 
tification by FAA air traffic controllers to Northeast Air Defense Sector person- 
nel of each hijacking. That issue and other aspects of the air defense response 
timeline were investigated by the National Commission on Terrorist Attacks 
Upon the United States — more commonly known as the 9/11 Commis- 
sion — beginning in early 2003. The commission's investigations continued into 
2004, and its final report was published in July of that year. 17 

The commission had access to extensive audio and written records, in- 
cluding various logs, tape recordings, and radar transmissions from NEADS, 
NORAD, CONR, and the FAA. These sources enabled the commission to de- 
termine, for the first time, an accurate timeline of the hijackings and the military 
response to them. 18 The reconstruction of the events of 9/11 had been faulty in 
the days immediately after the attacks and slow for some time thereafter. This 
was due, in part, to the complex, cascading nature of the attacks; their coordi- 
nation; their speed; conflicting and incomplete accounts regarding possible fol- 
low-on hijackings; an overwhelming focus on preventing future attacks rather 
than immediately dissecting the reaction to the last one; and inadequate foren- 
sic capabilities across the government, particularly within key entities of the air 
defense response. The original faulty timelines, drafted by government agen- 
cies in the hours and days after the attacks, were the basis of widespread media 
coverage and congressional testimony. Their problematic nature became appar- 
ent even before the 9/11 Commission published its final report, and in March 
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2004, NORAD's commander, General Eberhart, wrote to the 9/11 Commission 
acknowledging that its timeline was accurate. 19 

In a finding of particular relevance to the U.S. Air Force and the conduct 
of future U.S. air defense operations, the commission concluded that the Federal 
Aviation Administration did not notify the Northeast Air Defense Sector of the 
hijackings expeditiously enough for Air Force fighters to intercept any of the 
doomed aircraft. This resulted from various circumstances, many having to do 
with the surprise nature of the attacks and the violent tactics of the hijackers. 
With respect to the four hijackings, the commission determined the following: 

1. The FAA notified NEADS of the first hijacking — shortly thereafter de- 
termined to be American Airlines Flight 1 1 — just under nine minutes before the 
plane slammed into the north tower of the World Trade Center. This was the 
longest notification NEADS air defenders received that day. 20 

2. The FAA notified NEADS of a "second possible hijack" almost simul- 
taneously with the crash of United Airlines Flight 175 into the South Tower. 21 

3. Fifteen minutes after this second strike at the World Trade Center, the 
FAA passed to the NEADS air defenders a report that American Airlines Flight 
11 had in fact not crashed; instead, the hijacked aircraft was said to be flying over 
New Jersey, or even further south, and heading toward Washington, D.C. 22 The 
confusion over the status of American Flight 1 1 had begun, however, almost im- 
mediately after the North Tower was hit. During the period between the two at- 
tacks in New York City, the FAA told the NEADS air defenders that it could not 
confirm that American Flight 1 1 had crashed. 23 

4. Less than four minutes before American Airlines Flight 77 crashed into 
the Pentagon, the FAA told the NEADS air defenders that the flight was miss- 
ing. The FAA staffer, who did not describe the flight as a hijack, passed the in- 
formation to the air defenders during a telephone call initiated by NEADS about 
another problematic aircraft. 24 

5. NEADS personnel were not aware that United Airlines Flight 93 had 
been hijacked until just over four minutes after it had slammed into an aban- 
doned strip mine in Pennsylvania. Word of United Flight 93's last known lati- 
tude and longitude came during a telephone call from an FAA military liaison 
who was himself unaware that the aircraft had crashed. Twelve minutes after 
the crash, in the course of a telephone call initiated by NEADS staff, the FAA 
informed the air defenders that United Flight 93 had gone down at an unknown 
location northeast of Camp David. 25 

Even a cursory examination of the 9/11 Commission's report and timeline 
suggests that improving U.S. air defense against any future terrorist attack de- 
pends on a quicker FAA determination that a plane has indeed been hijacked 
and more effective coordination and timely communication between the FAA 
and the various sectors of NORAD. These enhancements, in fact, have been 
among the government's critical accomplishments since 9/11, and the success of 
Operation Noble Eagle has been due in part to improvements in these areas {see 
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Table 1, Timing of FAA Notification to NORAD's Northeast Air Defense Sec- 
tor, p 54). 

Throughout the attacks, and in the hours that followed, military and civil- 
ian agencies and leaders endeavored to obtain accurate information, establish 
interagency communications, and respond in a coordinated way. Their efforts 
bore increasingly substantial results as the day wore on. But during the critical 
109 minutes of the actual attack period, the military response by the U.S. gov- 
ernment consisted of the launch by NEADS of four fully armed air defense fight- 
ers and a spare jet armed with a 20-mm Gatling gun. 26 None of these aircraft 
were able to intercept any of the four hijacked planes. 27 

All five fighters launched during the attack period had a single, and the 
same, potential target: the first aircraft hijacked, American Airlines Flight 11. 
The first two fighters launched from Otis Air National Guard Base in response 
to an FAA request for assistance with Flight 11, but it had already crashed by the 
time the fighters took off. 28 More than thirty-five minutes later, the second three 
fighters launched from Langley Air Force Base in response to a faulty FAA re- 
port that Flight 11 was still aloft and was headed toward Washington, D.C. 29 

The five fighters could not intercept the second, third, or fourth hijacked 
planes at least in part because NEADS did not ask their pilots to do so. The 
NEADS air defenders did not ask because they did not know, or knew too late, 
that United Airlines Flight 175, American Airlines Flight 77, and United Air- 
lines Flight 93 had been hijacked. For their part, FAA air traffic controllers were 
in most cases unable to expeditiously and accurately determine if and which air- 
craft were hijacked. Their uncertainties and the resulting delays in notifying the 
military and requesting assistance were the consequences primarily of the tac- 
tics of the hijackers. By murdering the cockpit crews of the four flights, the hi- 
jackers rendered the government's antihijacking protocol obsolete; by turning off 
or altering the flights' transponders, they made locating, tracking, and inter- 
cepting the commandeered planes exceedingly difficult. 

In almost all pre-9/11 hijackings, the information flow from commercial 
pilots — under threat but still at the controls — to air traffic controllers, and then, 
eventually, to NORAD and responding U.S. Air Force pilots, remained intact. 
Within minutes, the nature of the 9/11 attacks rendered the traditional "hijack- 
ing paradigm" invalid. 30 The paradigm assumed that negotiations between hi- 
jackers and law enforcement would take place, usually after a commandeered 
plane landed safely, and that passengers and crew would emerge unscathed. The 
tactics of the 9/11 hijacker- pilots and their teams took full advantage of these 
long-held assumptions to keep the victimized passengers and remaining crew 
under control and the air traffic control system — and, hence, the air defense sys- 
tem — largely in the dark. In a stroke, FAA antihijacking protocols that had been 
the standard for decades and NORAD air defense response procedures built 
thereon were outdated and irrelevant. In hindsight and to their credit, many FAA 
and NEADS employees, with little situational awareness, and often in the ab- 
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sence of senior staff, took the initiative and improvised a response to a cata- 
strophic situation for which they had not trained and were not prepared. 31 

The last hijacking involving coordination between FAA air traffic con- 
trollers and management and the U.S. military took place on February 11, 1993, 
when a twenty-year-old Ethiopian man hijacked Lufthansa Airlines Flight 592 
over Austrian airspace shortly after it left Frankfurt International Airport for 
Cairo and Addis Ababa. Wielding what looked like a semiautomatic pistol but 
was later found to be a starter's pistol, Nebiu Demeke commandeered the Air- 
bus 310-300 and forced its pilot to divert it to New York after a refueling stop 
in Hanover, Germany. After the plane landed at John F. Kennedy International 
Airport, the hijacker surrendered peacefully to the Federal Bureau of Investiga- 
tion (FBI), ending a nearly twelve-hour ordeal for ninety-four passengers and ten 
crew members. 32 Notably, four U.S. military servicemen involved in the response 
to that hijacking played key roles in the air defense response on 9/11. 

The commander of the glass-enclosed battle cab overlooking the opera- 
tions floor at the Northeast Air Defense Sector on 9/11, Col. Robert Marr, was 
assigned to the NEADS operation section when his commander learned from a 
news broadcast of the Lufthansa hijacking. Seeking sufficient advance notice 
for a military response as the aircraft headed toward the United States, Marr told 
representatives of the Federal Aviation Administration that they needed to pass 
a request for military assistance up their chain of command. He also alerted his 
own chain of command to be prepared for such a request. As hours passed, co- 
ordination continued at higher levels of authority on the military and FAA sides, 
and Marr explained the need for an air defense response to the Lufthansa flight 
during a call he received from the White House. After initially opposing NEADS 
involvement, the White House called back several hours later that day and au- 
thorized the Northeast Air Defense Sector to proceed. The sector scrambled two 
F-15s from Otis Air National Guard Base, and then two F-16s from Atlantic 
City Air National Guard Base, to intercept and trail the hijacked aircraft. 33 Marr 
later recalled, "It took over six hours to gain an initial tail on this occasion." 34 

The lead pilot of the first two fighters sent aloft on 9/11, Lt. Col. Timothy 
Duffy, had been the second of the two Otis F-15 pilots scrambled in response 
to the Lufthansa hijacking. After intercepting the errant flight off the coast of 
eastern Canada, the fighters remained out of sight, about ten miles behind it. 
They moved within five miles, but above and behind the jet as it neared Kennedy 
Airport. As it landed, the Otis fighters flew by at low altitude, circled overhead 
while negotiations proceeded, and then returned to their bases after the hijacker 
surrendered. 35 

The senior director of the weapons section at the Northeast Air Defense 
Sector on 9/11, Maj. James Fox, was a NEADS weapons controller during the 
Lufthansa hijacking. That hijacking, unlike those on 9/11, unfolded during a pe- 
riod of many hours and over a distance of 5,600 miles, and its pilot remained in 
charge of the cockpit. Thus NEADS personnel were able to receive intelligence 
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far in advance of the aircraft's arrival in U.S. airspace and to prepare for an ef- 
fective, timely response by reviewing hijack regulations and exercises. 36 

The mission crew commander technician on 9/11, MSgt. Joe McCain, was 
a NEADS identification technician during the Lufthansa hijacking. His NEADS 
colleagues gave the flight a "Special 15" classification, as they would Delta Air- 
lines Flight 1989, suspected of being hijacked on September 11, 2001. The 
Lufthansa hijacking was treated as a law enforcement issue, and the FBI was the 
lead agency on the ground. 37 Because NEADS personnel exercised for this type 
of air piracy every week, the Lufthansa hijacking presented in terms of response, 
according to McCain, a "very easy scenario." 38 

Thanks in part to Marr's initiative, coordination between the FAA and 
NEADS in response to the Lufthansa hijacking went smoothly. Intercept au- 
thorization from higher national authorities came down to NEADS in relative ac- 
cordance with established interagency procedures, if slowly, and the actual 
intercept followed known protocols. 39 

U.S. government antihijacking procedures current in 1993 underwent only 
minor revisions in the years leading up to the 9/11 attacks. Certain high-level in- 
structions and orders in effect on September 11, 2001, set out protocols for FAA- 
NORAD cooperation and addressed issues surrounding requests for and 
authorization of military escort aircraft. Two of these official pronouncements 
laid out procedures to be implemented after the FAA determined that a plane 
had been hijacked and required military assistance, but they gave no guidance 
as to how the FAA would decide if a hijacking had, indeed, occurred. That gap 
was filled, at least in part, by a third order directed to FAA air traffic controllers. 

A Chairman of the Joint Chiefs of Staff instruction and attached enclo- 
sures dated June 1, 2001, provided guidance and direction to the deputy direc- 
tor for operations, National Military Command Center (NMCC) at the Pentagon; 
the NORAD commander; and operational commanders for dealing with hijack- 
ings of civil or military aircraft. Under the CJCS protocol, which was in effect 
on September 11, 2001, the head of the Federal Aviation Administration was 
solely responsible for directing the response of law enforcement agencies to a 
hijacking. If the FAA administrator decided that law enforcement needed the 
assistance of the Department of Defense, then he or she would notify, as soon 
as possible, the NMCC, the "focal point" for any FAA requests for DOD assis- 
tance. In this capacity the center would coordinate, on behalf of the DOD, be- 
tween the FAA and operational commanders. In the event of a hijacking judged 
to require the assistance of military escort aircraft, the FAA hijack coordinator 
was to notify the NMCC deputy director of operations, who would contact 
NEADS or an appropriate unified command to determine the availability of suit- 
able assets and would also forward the FAA request to the secretary of defense 
for approval. Approvals would return to NMCC for dissemination to NORAD 
or to the unified command. The center would then authorize direct coordination 
between the FAA and the designated squadron providing escort aircraft. Nor- 
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mally, NORAD provided such aircraft, in which case the FAA coordinated 
through the relevant air defense sector. 40 

In an updated special military operations order issued on July 12, 2001, the 
Federal Aviation Administration set out revised procedures for the escort of hi- 
jacked aircraft. It mirrored the protocol described in the CJCS order of June 1 
and like the CJCS order, took as its starting point an FAA determination that a 
confirmed hijacking needed a military escort. 41 The escort would be directed to 
perform three limited tasks: follow the hijacked aircraft, report anything un- 
usual, and assist search and rescue efforts in the event of an emergency. There 
was no mention of military aircraft being ordered to shoot down errant planes. 42 

A second FAA order that included a change dated July 12, 2001, set out air 
traffic control procedures and phraseology applicable to emergencies in general 
and hijackings in particular. Its provisions were designed for air traffic con- 
trollers, who were, in virtually all emergency situations, at the beginning of the 
decision-making chain, second only to pilots. The order gave them guidance on 
determining whether an emergency existed, on whether a flight had been hi- 
jacked, and on rendering assistance. Controllers were to provide "maximum as- 
sistance" to distressed aircraft, and "[ejnlist" the radar, emergency facilities, and 
services of the military when they deemed them necessary, or at the request of 
a pilot. But controllers could begin to assist generally only after receiving from 
pilots certain minimum required information about the nature of the emergency. 
Instructions on handling hijacked aircraft assumed only one scenario: that their 
pilots would be able to transmit — "squawk" — to their air traffic controllers a 
special hijack transponder code, which in September 2001 was Code 7500. On 
observing this code, a controller was to ask the pilot to verify it; thereafter, the 
controller was to notify supervisory personnel of the hijack. The controller was 
also responsible for assisting any military escort aircraft that might eventually 
be dispatched and to help position them behind the commandeered plane. 43 

Several tragically flawed assumptions about the nature of air piracy un- 
derlay CJCS and FAA antihijacking protocols in effect in September 2001. First, 
nearly all hijackers sought to advance political causes or economic agendas and 
not their own deaths. Second, hijackers did not go to flight training schools and 
would not know how to take navigational control of aircraft or make them 
unidentifiable to air traffic controllers by turning off or altering transponders. 
Third — this assumption was perhaps the most critical — airline pilots would have 
the time, opportunity, and ability to notify air traffic controllers, by using a code 
word over the radio or the special hijack transponder code. Fourth, there would 
be time for hijack notifications and requests and approvals for military response 
to pass up and down FAA, NORAD, and DOD chains of command as required. 44 

Even before 9/11, fighter pilots and other military personnel were not en- 
tirely sanguine about the prospects of happy outcomes to fighter escorts of hi- 
jacked commercial aircraft. The commander of one of the installations that 
scrambled fighters on September 11, 2001, recalled that military personnel "al- 
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ways joked that . . . [the purpose of a fighter escort of a hijacked aircraft] was 
plotting the wreckage. . . . you would mark the debris circle." 45 

The effectiveness of the protocols that provided the framework for FAA- 
NORAD coordination and military air defense in the event of a hijacking relied 
partly on the actions of the FAA administrator, who determined if a law en- 
forcement response would be sufficient or if DOD assistance would be needed. 
It also relied heavily on actions that would be taken by the FAA hijack coordi- 
nator at FAA headquarters, by personnel at the National Military Command Cen- 
ter, and by the secretary of defense. For various reasons as the 9/11 attacks 
began, those individuals and entities were unable to facilitate and coordinate 
FAA-NORAD communications or to authorize and direct air defense operations 
launched in response. 

More fundamentally, however, successful antihijacking protocols and 
timely air defense response depended on air traffic controllers in FAA air route 
traffic control centers to determine if a hijack or other emergency situation ex- 
isted or was imminent. Under standard practices described, air traffic controllers 
in September 2001 relied largely on notification by pilots to expeditiously con- 
firm a hijack. 46 Indeed, air traffic controllers had been taught in FAA hijack train- 
ing courses before 9/11 to expect such confirmation. 47 The courses were based 
on two unalterable beliefs: pilots would remain in control of aircraft during 
piracy incidents; and they would be able to notify controllers of their situation 
overtly or covertly from the cockpit in one of three ways: first, by directly con- 
firming verbally that the flight was hijacked; 48 second, by altering the transpon- 
der code to the 7500 hijack code, which would cause the word "HIJACK" to 
flash across the flight's data block on the traffic monitoring unit in the relevant 
air route traffic control center; or, third, by signaling the air traffic controller 
with coded language, such as the word "trip" to refer to the course of the air- 
craft. 49 However, the 9/11 hijackers, having quickly killed or disabled the cock- 
pit crews of all four aircraft, ensured that there would be no such notification. 50 
Critically, also, training exercises did not emphasize the FAA and NORAD 
working together to respond to the extent required on September 11, 2001 . While 
training did afford air traffic controllers the opportunity to practice the pre-9/11 
protocol for alerting the military to a hijack threat, it apparently never required 
them to practice intercept procedures. 51 

Controllers were trained to keep aircraft separated, not to vector them to- 
gether, 52 and many lacked experience dealing with military aircraft traveling at 
supersonic speeds. 53 Several controllers on duty during the 9/11 attacks had had 
air traffic control experience during prior service in the U.S. Air Force, and at 
least one seasoned veteran believed that his ability to vector a fighter for inter- 
cept resulted from his military experience, not from his FAA training. 54 It is un- 
clear whether or not training included a hijack simulation or intercept exercise 
involving joint FAA-NORAD participation. 55 In any event, training did not pre- 
pare controllers for suicide hijackers. 56 
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The 9/11 Commission determined that, despite this gap in the training of 
its air traffic controllers, the Federal Aviation Administration had "indeed con- 
sidered the possibility that terrorists would hijack a plane and use it as a 
weapon." 57 In the spring of 2001, the agency's intelligence function, the Office 
of Civil Aviation Security, distributed an unclassified CD-ROM presentation to 
air carriers and airports, including authorities at Logan, Newark, and Dulles. 
The briefing, whose overall subject was the increased threat to civil aviation, 
mentioned the possibility of suicide terrorist hijackings but concluded that "for- 
tunately, we have no indication that any group is currently thinking in that di- 
rection." 58 In its Final Report, the 9/11 Commission left to an endnote the 
warning contained in the FAA intelligence presentation: "... if a hijacker in- 
tended to commit suicide in a spectacular explosion, the terrorist would be likely 
to prefer a domestic hijacking." 59 

Like air traffic controllers, U.S. commercial airline flight crews and at- 
tendants were not trained to confront suicide hijackers. Before 9/11, the airlines' 
Common Strategy and training, like the FAA's for air traffic controllers, was 
based on traditional hijacking. In short, as recalled by the "chief pilot" and man- 
aging director, Flight Operations Technical for American Airlines, hijackers 
"were understood to be terrorists that wanted to come out of the thing alive." 60 

Without notification from a pilot, the determination that a flight was hi- 
jacked — and not just experiencing serious mechanical difficulties or under the 
command of an inattentive pilot — rested with the air traffic controller. Absent a 
"Mayday" or other verbal communication from a pilot, FAA emergency and hi- 
jack response protocols directed controllers in doubt about whether or not a sit- 
uation was an emergency or potential emergency to "handle it as though it were 
an emergency." 61 Even so, the protocols assumed, in the main, that pilots would 
be able to communicate and be part of the decision-making process. A controller 
was to begin determining the type of assistance necessary and rendering it as 
soon as requests and enough information had been received from the pilot. 62 
Even specific instructions on hijacked aircraft were predicated on the notion 
that the controller would observe the special hijack transponder code, which, it 
was assumed, would be transmitted by the pilot. 63 In the words of Cleveland 
Center air traffic controller John Werth, the thirty-year FAA veteran who han- 
dled United Airlines Flight 93 on September 11, 2001, "you can't do anything 
with the aircraft unless he talks to you." 64 

Course deviations, loss of radio contact, and loss or alteration of transpon- 
der signals — later determined to be the first signs of trouble on the 9/11 flights — 
were not unheard of, nor were they necessarily disturbing, particularly if they 
occurred in isolation. Before the 9/11 attacks, many air traffic controllers had 
handled commercial aircraft that had gone slightly off course, usually because 
of weather. A significant course deviation, however, would indicate a serious 
mechanical problem. Controllers had experience with another notoriously com- 
mon phenomenon, loss of radio contact with pilots and crew and, much less fre- 
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quently, with the loss of an aircraft's transponder signal. Before 9/11, controllers 
would have interpreted the rare instance of simultaneous or nearly simultaneous 
loss of radio contact and transponder signal as a serious in-flight emergency, 
one caused by catastrophic equipment failure or a crash, not a hijacking. Like- 
wise, the combination of even a drastic course deviation, loss of radio commu- 
nications, and loss of transponder could signal an electrical or mechanical 
failure, not necessarily a hijacking. In any of these circumstances, as on Sep- 
tember 11, 2001, the controller would spend several minutes trying to contact the 
pilot, the airline company, and nearby planes to reestablish communications with 
the problematic flight and correct its course. Only after those efforts had been 
tried and failed would the controller raise a more general alarm. 65 

In the event of a hijacking in which the pilot was able to alert a Federal 
Aviation Administration air route traffic control center, for example by means of 
the hijack transponder code, the responsible air traffic controller would verify the 
hijacking with the pilot using the hijack code and then notify his or her super- 
visor of the incident. To avoid escalating the situation, the controller would not 
question the pilot but would handle any requests from the cockpit. Routinely, the 
controller would also clear airspace in front of the hijacked plane. 66 Meanwhile, 
the supervisor would inform the center's traffic management unit and the oper- 
ations manager in charge of the incident. Any request for military escort or other 
assistance would be initiated at the level of the operations manager in charge. 
The FAA center would then contact the appropriate regional operations center, 
whose staff would, finally, notify FAA headquarters. 67 There, the hijack coordi- 
nator would contact the National Military Command Center to ask for a military 
escort aircraft, and the center would then seek permission from the Office of the 
Secretary of Defense to accede to the FAA request. If and when that office ap- 
proved, it would send the necessary orders down the NORAD chain of com- 
mand. 68 Thereafter, the NMCC would keep the hijack coordinator abreast of 
developments. The center would also help FAA air route traffic control centers 
coordinate directly with and provide tracking information to the North Ameri- 
can Aerospace Defense Command. 69 Eventually, an appropriate FAA air traffic 
controller would assist in discretely placing five miles behind the hijacked air- 
craft any escort aircraft scrambled in response. 70 

The CJCS instruction and FAA orders, which applied to confirmed hi- 
jackings, were bypassed in the emergency air defense response to the attacks of 
September 11, 2001. The 9/11 Commission maintained that the standard proto- 
col was unsuitable "in every respect" for the occasion. 71 Commissioners were 
probably correct in concluding that its application that day would not have en- 
hanced the possibilities of intercepting — much less shooting down — the doomed 
aircraft. 72 But apropos or not, the protocol was by and large not used. That the 
FAA established direct contact with NEADS, and that NEADS scrambled and 
launched its alert fighters, had more to do with individual initiative than with ad- 
herence to established procedure. 
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The suicide hijackings launched on September 11, 2001, constituted a type 
of war unseen on U.S. soil since the Japanese bombing of Pearl Harbor. Like that 
earlier attack, the success of this "new type of war" was virtually ensured — at 
least on that day — by its very nature. The strategy and tactics of the four teams 
of hijackers and the ease with which they and their weapons passed through the 
aviation security system allowed the perpetrators of the 9/11 attacks to achieve 
a key element of a successful military campaign — surprise. 73 A number of fac- 
tors contributed to the fog of war challenging the FAA air traffic control appa- 
ratus and the NEADS air defense response system on September 1 1 . Perhaps 
the primary cause of the resulting tumult was the sine qua non of the 9/11 at- 
tacks: the four hijacker-pilots and their shocking synthesis of the tradition of 
suicide bombing and the tactics of kamikazes. 

Much emphasis was placed after the attacks on the fundamentalist moti- 
vations of the attackers, but their motivations were relevant in one particular 
sense: the hijackers and those who inspired and planned the attacks believed 
they were at war against the financial, commercial, military, and political sys- 
tems of the West. But their motivations were irrelevant in at least one respect: 
the U.S. federal government and the national aviation and air defense systems 
were in many ways ill prepared to respond quickly and effectively to a surprise 
attack launched from within the country by attackers of any motivation. 

In the end, three of the four hijacked flights reached their targets; the 
fourth, United Airlines Flight 93, whose hijackers probably intended to hit the 
Capitol, failed to do so because of unexpected timing and human endeavor {see 
Table 2, General Overview of the Four Hijacked Flights, p 55). The fourth at- 
tack was thwarted, in part because of the flight's tardy takeoff and a late takeover 
by the hijackers. The delays gave passengers time to learn from loved ones on 
the ground of the other hijackings, to face their own probable fate, and to col- 
lectively try to retake the aircraft. 

This heroic civilian counterattack was not the only effort undertaken on the 
morning of September 11, 2001, to defend the country against the hijacked air- 
craft- turned-guided-missiles. As the attacks unfolded in an increasingly chaotic 
and deadly situation, FAA air traffic controllers and NEADS air defense per- 
sonnel raced to obtain timely, accurate, comprehensible, and actionable infor- 
mation, and to prepare, launch, and direct an aerial counterattack with the small 
force of available alert aircraft. 

During several decades of traditional hijackings, the expeditious launch of 
NORAD air defense fighters depended largely on timely hijack notification by 
the Federal Aviation Administration, which in turn depended on how quickly 
FAA air traffic controllers determined that a flight was hijacked, which in its 
turn depended on maintaining ground communications with a hijacked plane 
and, particularly, on the ability of a victimized pilot to notify controllers of his 
or her predicament. The 9/11 hijackers were in no way traditional, however. 
They swiftly murdered the pilots, took over flight control of the airliners, ceased 
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responding to direction from air traffic controllers, changed course, and turned 
off or altered transponders. The four teams of hijackers undertook some of these 
actions in different sequences, but the result was the same: in a matter of min- 
utes, the traditional communication chain, from pilot to FAA to NORAD, was 
shattered; determining a hijack became highly problematic; and traditional air 
defense response protocols were rendered obsolete. What remained to be re- 
constituted, indeed, established, was an effective communications link between 
the FAA and NORAD or specifically, on September 11, 2001, its Northeast Air 
Defense Sector. 

American Airlines Flight 11 

The Federal Aviation Administration notified NEADS of the first hijack- 
ing — later determined to be American Airlines Flight 11 — just under nine min- 
utes before the plane slammed into the north tower of the World Trade Center. 
This was the longest notice NEADS air defenders received that day. 74 That cir- 
cumstance, and other aspects of the first attack, make the hijacking of Flight 11 
and the sequence and development of the air traffic control-air defense response 
of particular interest. 

American Airlines Flight 11, a Boeing 767-223, 75 scheduled to depart Bos- 
ton Logan International Airport at 7:45 a.m. EDT on a nonstop flight to Los An- 
geles International Airport, pushed back from the gate at 7:40 a.m. and lifted 
off at 7:59 a.m. On board were a pilot, first officer, nine flight attendants, and 
eighty-one passengers, including five al Qaeda terrorists. 76 Just under fourteen 
minutes into the flight, in its last routine communication, the cockpit crew ac- 
knowledged navigational instructions 77 from air traffic control specialist Peter 
Zalewski, on duty in Area C at FAA's Boston Air Route Traffic Control Center, 
Nashua, New Hampshire. Sixteen seconds into the transmission, Zalewski in- 
structed the pilots to climb to 35,000 feet. They did not acknowledge his direc- 
tion or the controller's subsequent radio transmissions. Investigators, including 
the 9/11 Commission, later concluded that the hijacking occurred at that point 
in the flight, but Boston Center personnel did not suspect for approximately ten 
more minutes that American Airlines Flight 11 had been hijacked {see Table 3, 
American Airlines Flight 11 and 9/11 Commission Timeline, p 56). 78 

Becoming increasingly concerned as the plane began moving into the ar- 
rival route for Boston Logan Airport and approaching another sector's airspace, 
Zalewski checked his own radio equipment, which was working properly; tried 
to contact the flight on an emergency frequency; 79 checked the frequency used 
by Boston Approach, the previous sector; and tried to contact American Airlines 
through the Aeronautical Radio Incorporated (ARINC) system. Thinking that 
the plane might be having an electrical problem, he reported to his supervisor, 
Jon Schippani, the sole operational supervisor in charge of Area C that day, and 
they began to follow procedures for handling a "no radio" (NORDO) aircraft. 80 
At that time, neither suspected a hijacking. 81 
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Over the next few minutes, Zalewski and other Boston Center air traffic 
controllers and radar associates attempted to contact American Airlines Flight 1 1 
several times by various methods on different frequencies, enlisting help from 
the previous sector, Boston Approach, and also from other American aircraft. 
American Airlines Flight 11 did not respond. 82 Soon thereafter, as the situation 
escalated during what would be the missing aircraft's last six or seven minutes 
of flight, John Hartling, Zalewski's colleague and a former U.S. Air Force air 
traffic controller, expanded the center's search for assistance by contacting U.S. 
Air Flight 583 and United Airlines Flight 175. These flights succeeded in achiev- 
ing visual contact with the hijacked plane and identified its altitude as between 
27,000 and 29,000 feet. United Flight 175 would soon, itself, be hijacked. 83 

In the midst of these early and ongoing efforts by Boston Center person- 
nel to communicate with American Airlines Flight 1 1 and to direct other aircraft 
away from its path, one of the hijackers in the cockpit of the aircraft turned off 
its transponder. 84 With the loss of this secondary radar return, the plane's flight 
data tag indicating its speed, altitude, airline identification, and flight number in- 
stantly disappeared from Boston Center radar scope displays. American Airlines 
Flight 11 was thereafter observed as only a primary radar target, a simple blip, 
by Zalewski and other controllers when they switched their computers to display 
primary targets. 85 They were able to continue to track the flight after giving it a 
data tag. 86 Without that tag, the blip of American Airlines Flight 11 would have 
been indistinguishable from the sea of blips, visible on FAA and NEADS scopes, 
representing thousands of airplanes in U.S. airspace that morning. 87 

The disabling or alteration of the transponders on all four aircraft hijacked 
on September 11, 2001, was intentional and calculated by the hijackers and had 
serious consequences for FAA and NEADS personnel attempting to find, track, 
and intercept the missing planes. Without properly operating transponders to re- 
spond to queries from their ground-based radar, FAA air traffic controllers could 
not easily identify and track the primary-only flights. Critically, controllers could 
not determine the planes' altitude without the help of a pilot flying nearby who 
might be able, at best, to provide estimates; nor could they easily determine the 
planes' latitude or longitude coordinates. 88 Unfortunately, most Boston Center 
personnel did not know that NEADS air defense scope operators could deter- 
mine altitude on nontransponding, primary-only aircraft. However, several key 
individuals at Boston Center — notably, its military operations specialist, Colin 
Scoggins — did know and realized that this capability would be another reason 
to contact the military, in addition to asking for fighters to escort or tail a hi- 
jacked aircraft. At the New York Air Route Traffic Control Center, at Ronkon- 
koma, on Long Island in New York, controllers also knew that they could not 
determine altitude on a plane that was on only primary radar. But some key 
staffers there, including twenty-year FAA veteran Kevin Delaney, the supervi- 
sor of New York Center's quality assurance office on 9/11, did not know that the 
military could do so. 89 To successfully find any airplane in the sky, the North- 
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east Air Defense Sector needed to know either the plane's transponder code — 
Mode 3 in military parlance and Mode C in FAA parlance — or the plane's lati- 
tude and longitude coordinates. 90 

At that point on September 1 1 , the loss of a transponder on a commercial 
aircraft did not mean that it had been hijacked. However, Zalewski and his col- 
leagues were even more concerned that the aircraft was having serious electri- 
cal or mechanical trouble. Still, no one at Boston Center yet suspected that the 
plane had been hijacked. Their views soon changed dramatically. Just over ten 
minutes after the aircraft's last routine communication, Zalewski heard two 
clicks over the frequency assigned to several planes in the sector, including 
American Airlines Flight ll. 91 He then heard what his experience in interna- 
tional air traffic control told him was a Middle Eastern voice transmitting the fol- 
lowing radio message: 92 "[W]e have some planes[.] [J]ust stay quiet[,] and you'll 
be okay[.] [W]e are returning to the airport." 93 

The transmission was garbled, and Zalewski could not decipher the first 
sentence. 94 Seconds after receiving this transmission, he clearly heard a second 
threatening transmission, which convinced him that the flight had been hijacked. 
An unidentified voice — probably that of Mohammed Atta — from the cockpit of 
what was subsequently determined to be American Airlines Flight 11 made the 
following transmission at 8:24:56 a.m. EDT: "[N]obody move[.] [Everything 
will be okay[.] [I]f you try to make any moves[,] you'll endanger yourself and 
the airplane[.] [J]ust stay quiet[.]" 95 A little over a minute later, near Albany, 
New York, the flight began a hard but level left turn to the south. 96 A third trans- 
mission came at 8:33:59 a.m. EDT: "[N]obody move pleasef.] [W]e are going 
back to the airport[.] [D]on't try to make any stupid moves[.]" 97 

The importance of these transmissions to the recognition of American Air- 
lines Flight 11 as hijacked, and, thus, to the air defense response, cannot be over- 
stated. The 9/11 Commission believed that the hijackers intended to broadcast 
these messages to the passengers over the cabin's public address channel. 98 It 
seems likely that Atta wanted to keep the passengers quiet, seated, and unaware 
of their approaching fate. The first two of the three threatening communications 
came less than two minutes before Atta made a major course alteration to begin 
the southbound turn. The third transmission came about three minutes before 
American Airlines Flight 11 began its steep and final descent from 29,000 feet 
and less than thirteen minutes before it crashed into the North Tower. 99 

The hijackers' announcements, however, were not made over the public 
address system and so were not heard by anyone on board American Airlines 
Flight 1 1 . 100 That the transmissions were heard, instead, by air traffic controllers 
and by other planes on the same frequency suggests that the hijackers pushed the 
wrong button, not knowing how to properly operate available communications 
systems. 101 Included in the group of planes on the same frequency, ironically, 
was United Airlines Flight 175. That flight's captain and first officer — to avoid 
being overheard on the frequency by anyone doing harm in the cockpit of Amer- 
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ican Airlines Flight 11 — waited more than fifteen minutes, until they were 
passed out of Boston Center airspace, to tell David Bottiglia at the New York Air 
Route Traffic Control Center that they had heard "a suspicious transmission" 
after departing Boston Logan. 102 

After receiving the second transmission, Zalewski put the communica- 
tions from American Airlines Flight 1 1 on the overhead microphone so that the 
entire section could hear what was going on. Because he had not clearly under- 
stood the first sentence of the garbled transmission, he asked Boston Center 
quality assurance specialist Robert Jones to pull the audio tapes so that the trans- 
mission could be analyzed. 103 Some minutes later, as soon as he had reviewed 
the first communication, Jones told Terry Biggio, the operations manager in 
charge at Boston Center, that a speaker with what was clearly a Middle Eastern 
accent had begun the transmission with the following statement: "We have some 
planes." Biggio, in turn, immediately — ironically, seconds before United Air- 
lines Flight 175 crashed into 2 World Trade Center — passed this information to 
the New England Regional Operations Center (ROC) in Burlington, Massachu- 
setts. He did not call the Washington Operations Center (WOC) directly to in- 
form FAA headquarters of the hijacking, but he joined an ROC conference call 
that he believed was actively monitored by WOC personnel. 104 

In the meantime, the second threatening transmission had convinced 
Boston Center personnel that American Airlines Flight 11 had been hijacked. In 
Biggio's view, the combination of the loss of radio contact, the loss of the 
transponder, and the course deviation was serious and made it necessary to con- 
tact the Regional Operations Center. But he later doubted that Boston Center 
personnel would have concluded that the plane had been hijacked had they not 
heard the threatening communications from the cockpit. 105 

At that point, eleven minutes after the last routine communication from 
Flight 11, Boston Center air traffic controllers and managers realized that the 
aircraft had been hijacked. However, Boston Center would not notify the air de- 
fenders at the Northeast Air Defense Sector for another twelve minutes. The pre- 
9/11 "conceptual box," which circumscribed FAA and NORAD antihijacking 
protocols, planning, and practice, remained in place even longer. 106 It was based 
on two premises regarding commercial aviation and hijacking, and by exten- 
sion, national defense: pilots would remain at the controls of their planes and 
would be able to communicate their predicament to air traffic controllers; and 
hijackers did not know how to fly planes and did not want to die. The first major 
hijacking of the twenty-first century rendered both notions obsolete. 

The pre-9/11 conceptual box limited the ability of FAA and NORAD per- 
sonnel to predict or even imagine what could happen in the cockpit of a hijacked 
aircraft. Consequently, many Boston Center personnel believed that the threat- 
ening transmissions were being made by one or more individuals in the back- 
ground of the flight deck. They also believed that some other individual, 
probably the American Airlines Flight 1 1 pilot, was intentionally and surrepti- 



21 



tiously keying a push-to-talk button on the aircraft's yoke to allow air traffic 
controllers to hear what was going on in the cockpit. 107 This confusing and faulty 
assumption — that the American Airlines pilot remained at the helm for much of 
the flight — resurfaced throughout the morning in official FAA headquarters and 
regional operations center records 108 despite widespread awareness that at least 
one person on board had been stabbed, that communications with the aircraft 
had been lost, and that its altitude had been fluctuating. 109 A New England Re- 
gional Operations Center daily log even noted a report that not only was the 
pilot keying the microphone, the crew of the hijacked aircraft had turned the 
transponder off. 110 The belief that the American Airlines pilot was keying the 
microphone was reported as fact by major newspapers in the days after the at- 
tacks 111 and was repeated two years later to 9/1 1 Commission staff by at least one 
Boston Center supervisor. 112 In fact, however, after the attacks, the FBI reviewed 
the speech patterns and other characteristics of the recorded transmissions, and 
its analyst concluded definitively — as Zalewski and Jones had surmised that 
day — that one of the hijackers in the cockpit made the transmissions, speaking 
directly into the microphone. 113 

The notion that airline pilots always remained at the controls of hijacked 
aircraft persisted beyond the demise of American Airlines Flight 11. At the 
Northeast Air Defense Sector, seconds after learning that FAA personnel were 
dealing with a possible second hijacking, that of United Airlines Flight 175, 
NEADS personnel in the surveillance section remarked on the absence of the 
"7500" hijack transponder code signal from its cockpit crew: "We have smart 
terrorists today, their [sic] not giving them [the pilots] a chance to squawk[.]" 114 

The conceptual box also limited the framework in which hijacking was 
interpreted. Before 9/11, a hijack was thought to entail a diversion to Cuba or a 
ransom demand and was not considered an act of terrorism." 5 The threatening 
communications convinced Boston Center controllers and managers that Amer- 
ican Airlines Flight 11 had indeed been hijacked. But most of them — and, soon, 
their opposite numbers at New York Air Route Traffic Control Center — believed 
that the plane might land at Kennedy Airport or even Albany Airport, 1 1 6 or would 
head to Cuba or elsewhere in the Caribbean. 117 No one seriously considered any 
other outcome. 118 Even in the later stages of the flight's path, as New York Cen- 
ter controllers watched it head toward Kennedy Airport until it disappeared from 
their scopes, some believed that its failure to reappear on screen was due to mal- 
functioning radar. In the absence of any information that what had hit the North 
Tower was in fact American Airlines Flight 11, some controllers initially thought 
that the aircraft might have landed at Kennedy. 119 

Just after Boston Center received the second transmission, and in accor- 
dance with FAA-NORAD protocol, center managers and controllers notified 
colleagues and superiors across the organizational structure and up the com- 
mand chain of the FAA that a suspected hijack was in progress. Daniel L. Bueno, 
the supervisory traffic management coordinator, and Terry Biggio, the opera- 
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tions manager in charge, notified the New England Regional Operations Center 
and the Air Traffic Control System Command Center in Herndon, Virginia, both 
of which were in contact shortly thereafter with the Washington Operations Cen- 
ter at FAA headquarters. Bueno and Biggio and several Boston Center con- 
trollers also began coordinating with New York Center, New York TRACON 
(Terminal Radar Approach Control) in Westbury, and Washington and Cleve- 
land Air Route Traffic Control Centers. 120 Despite these endeavors, notable gaps 
in communication and coordination soon appeared. For example, a teleconfer- 
ence that Bueno established at the suggestion of Herndon Command Center be- 
tween Boston, New York, and Cleveland Centers did not include Indianapolis 
Center. There was no indication that the hijacked plane would head toward In- 
dianapolis Center's airspace, and, thus, no reason to distract its controllers. 121 
More significant at this point was that "FAA headquarters began to follow the 
hijack protocol but did not contact the NMCC to request a fighter escort." 122 

The situation with American Airlines Flight 1 1 began to deteriorate quickly 
after Zalewski received the second threatening transmission. A few minutes after 
the flight turned to the south, Boston Center personnel, lacking precise infor- 
mation on its altitude, were particularly concerned when they discerned a de- 
crease in the speed of its data tag. Bueno and the military operations specialist, 
Colin Scoggins, believed that this loss of speed meant the plane was possibly de- 
scending. 123 Just after Zalewski and his section colleagues heard the third threat- 
ening transmission, and in conjunction with ongoing efforts to alert the FAA 
chain of command to the possible hijacking, several center staffers launched a 
parallel, two-part effort, on their own initiative and outside the bonds of proto- 
col, to notify the military and expedite the air defense side of the hijacking re- 
sponse equation. 

The first part of the effort began at 8:34 a.m. EDT when Bueno called 
Cape TRACON, an FAA facility at Otis Air National Guard Base at Falmouth, 
on Cape Cod, in Massachusetts. Because of his experience with a scramble to 
escort a hijacked aircraft in the early 1980s, Bueno was aware that military as- 
sistance came from Otis. 124 He knew that an FAA letter of agreement with Cape 
TRACON set out the procedure for active fighter scrambles, under which his call 
should have gone to the Northeast Air Defense Sector. But he called Cape TRA- 
CON directly because of the urgency of the situation, because the facility was 
the FAA contact point for Otis, 125 and possibly because he may not have been 
sure how to contact Otis himself. 126 Bueno spoke first with a Cape TRACON air 
traffic controller, Steven Walsh, and then immediately thereafter with Tim 
Spence, the operational supervisor, about contacting Otis to request that fight- 
ers be scrambled to "go tail" American Airlines Flight 11. Bueno told Spence 
that the flight was "a possible hijack," and Spence assured Bueno several times 
that he would pass the request to Otis. 127 At the same time, Walsh heard the Cape 
TRACON flight data specialist say that he was trying to telephone the command 
post at Otis. 128 On September 11, 2001, the North American Aerospace Defense 
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Command had limited assets; under its control were only fourteen fighters on air 
defense alert, two each at seven alert sites in the United States. Two of these, Otis 
Air National Guard Base and Langley Air Force Base, were force providers for 
the mission of the Northeast Air Defense Sector. The Otis facility, home to the 
102d Fighter Wing, was the only air defense base on the East Coast between 
Washington, D.C., and the Canadian border. 129 Bueno apparently also made an 
additional phone call or calls. Years after the 9/11 attacks, he told author Lynn 
Spencer that he called the Otis Tower. A controller there told him to contact the 
Northeast Air Defense Sector, the only authority that could order a scramble. 130 
Scoggins, Bueno's colleague, recalled just over a week after the attacks that 
Bueno had called the 102d Fighter Wing and was told that the wing "needed a 
scramble order over the scramble circuit." 131 

The second part of Dan Bueno's effort to scramble fighters began con- 
currently with or immediately after his conversation with Spence. Over the next 
several minutes, at least two of Bueno's Boston Center coworkers, independ- 
ently or at his direction, tried to contact the Northeast Air Defense Sector di- 
rectly. After the American Airlines Flight 1 1 situation began to escalate, William 
Dean, then working as John Hartling's radar associate in Area E, Sector 20, left 
his position and reported to the Traffic Management Unit watch desk. There he 
made several calls, including to NEADS, where, he thought, there might be air 
defense fighters. Dean expected that a quick and effective procedure to get mil- 
itary assistance existed. He found, instead, that the information flow between the 
FAA and NEADS was "muddled." 132 In addition, Bueno asked Joseph Cooper, 
a colleague in the Traffic Management Unit, to call the military for assistance. 
Cooper reached TSgt. Jeremy W. Powell, on the operations floor as a NEADS 
senior director (weapons) technician, at 8:37:24 a.m.: 

Boston Center (Cooper): Hi. Boston Center TMU [Traffic Manage- 
ment Unit]. We have a problem here. We have a hijacked aircraft 
headed towards New York, and we need you guys to — we need 
someone to scramble some F-16s or something up there, help us 
out. 

NEADS (Powell): Is this real world or exercise? 

Boston Center (Cooper): No, this is not an exercise, not a test. 133 

Cooper did not know that any military exercises were planned for Sep- 
tember 11, 2001. However, NEADS personnel were indeed expecting a planned 
exercise, Vigilant Guardian, to begin at 9:00 a.m. EDT, 134 but it was on hold be- 
cause of a Russian Bear exercise. 135 Because of Vigilant Guardian, the battle cab 
was already staffed and concluding a briefing on the exercise. 136 Powell's ques- 
tion would be repeated a number of times that morning by his colleagues and su- 
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periors, who initially wondered — as Powell had done — if the details they heard 
over the next few minutes of the suspected hijacking might actually be simulated 
scenarios that planners were inserting into the training exercise. 137 Even after 
the crash of United Airlines Flight 175, NEADS air defenders continued to em- 
phasize the "real-" or "live-world" nature of the morning's events and to alert 
others that they were not part of the previously planned exercise. 138 

Powell contacted Maj. Dawne L. Deskins, who was then in the battle cab 
as the NEADS aircraft control and warning officer for the Vigilant Guardian ex- 
ercise. When she arrived on the operations floor, she confirmed with Powell that 
the call from Boston Center involved a real- world hijack, and Powell put her on 
the phone. 139 Cooper explained to her, in greater detail, the situation and his re- 
quest for assistance, although he did not realize that the alert fighters at Otis 
were F-15s and not F-16s: 

Boston Center (Cooper): We have a hijacked aircraft headed towards 
the New York metro area, wondering if you could, umm, send some- 
one up there. Some F-16s maybe out of Otis[.] 

NEADS (Deskins): Okay, do you have a Mode 3 on it[?] 

Boston Center (Cooper): Nope, it is just a primary target only . . . 
[W]e lost the . . . Mode C on it, so you would have to get up in the 
air[,] and we would have to vector you towards the aircraft[.] 

NEADS (Deskins): . . . Can you give us a lat.lon. [latitude-longitude] 
where you think he is . . . [?] 

Boston Center (Cooper): Yeah, hold on a second ... 140 

Boston Center was still tracking the errant flight's primary radar return, but be- 
cause the transponder signal was lost, the center would have to control the in- 
tercept until NEADS identification technicians could find the aircraft. Without 
the transponder signal and, therefore, without a radar point, NEADS personnel 
needed the plane's latitude and longitude coordinates. 141 Within minutes, these 
exchanges between Boston Center and NEADS personnel would lead to the 
placing on battle stations and, shortly thereafter, the scrambling of two F-15 
fighters from Otis Air National Guard Base. 

After his conversation with Dan Bueno at Boston Center, Tim Spence at 
Cape TRACON began his telephone calls by contacting the Otis Air National 
Guard B ase Tower to alert personnel there of the American Airlines Flight 1 1 sit- 
uation and to ask how to facilitate Bueno's request for fighters. 142 Otis Tower per- 
sonnel gave Spence a telephone number for the Otis base operations desk and/or 
the Otis supervisor of flying desk and apparently also told him that a scramble 
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An image of the crash of American Airlines Flight 77 into the Pentagon, captured by 
a facility security camera. 




A gray smoke plume rising above the crash site of United Airlines Flight 93 near 
Shanksville, Pennsylvania. Photo, "End of Serenity," used with permission of Valen- 
cia McClatchey, photographer and copyright owner. 
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The Pentagon in flames, minutes after the crash of American Airlines Flight 77. Foam 
residue is visible on the building's facade, before its collapse. Unattributed DOD photo. 




Rubble at Ground Zero, September 19, 2001, one week after al Qaeda terrorists flew 
American Airlines Flight 11 and United Airlines Flight 175 into the World Trade Cen- 
ter towers, causing their collapse. U.S. Navy photo by Photographer's Mate 2d Class 
Aaron Peterson. 



27 



F-16s of the 119th Fighter Wing, North Dakota Air National Guard, flying a combat 
air patrol over the Pentagon and Washington, D.C., as part of Operation Noble Eagle, 
November 2001. Air National Guard photo. 




An F-15 of the 102d Fighter Wing, Massachusetts Air National Guard, flying over 
lower Manhattan and Ground Zero during an Operation Noble Eagle combat air pa- 
trol mission several months after the 9/11 attacks. Air National Guard photo by Lt. Col. 
Bill "Torch" Ramsey. 
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An F-16 Fighting Falcon flying over the Pentagon as part of Operation Noble Eagle, 
September 24, 2003. The aircraft is assigned to the 20th Fighter Wing at Shaw Air 
Force Base, South Carolina. U.S. Air Force photo by SSgt. Aaron D. Allmon II. 




Two F-16 Fighting Falcons flying over San Francisco Bay and into precontact position 
with a KC-135E Stratotanker before refueling during an Operation Noble Eagle train- 
ing patrol, March 16, 2004. The F-16s are with the California Air National Guard's 
144th Fighter Wing in Fresno. The KC-135 is with the 940th Aerial Refueling Wing 
at Beale Air Force Base, California. U.S. Air Force photo by MSgt. Lance Cheung. 
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required authorization from the Northeast Air Defense Sector. Spence then called 
the base operations building and told personnel there of the possible hijacking. 
Spence acknowledged that he did not have authority to order a fighter scramble, 
but he advised the operations desk to prepare to receive a scramble order. 143 

At this point, the lines of communication and hijack notification between 
Cape TRACON, Otis Tower, and Otis base operations become less clear. Otis 
Tower personnel apparently also called the operations building and spoke with 
TSgt. Margie Woody, who transferred the tower's call to TSgt. Michael Kelly. 144 
As the full-time technician in the Command Post, Kelly was responsible for 
communicating NORAD and NEADS directives to Otis Air National Guard 
Base. Kelly recalled that he gave the caller, who he identified as Boston Cen- 
ter — not Otis Tower — the NEADS number and also transferred the call. 145 The 
caller may in fact have been neither Boston Center nor Otis Tower, but instead, 
Cape TRACON: Spence later recalled that by the time he spoke with a male 
military staffer at the Northeast Air Defense Sector, Boston Center had already 
contacted the NEADS air defenders. 146 Kelly then called the supervisor of fly- 
ing desk and notified Lt. Col. Jonathan T. "Tracer" Treacy, the commander of the 
102d Fighter Wing's 101st Fighter Squadron and the supervisor of flying for the 
day. 147 Kelly also called NEADS personnel, to notify them of the possible hi- 
jacking and scramble request. He reached MSgt. Joe McCain at the mission crew 
commander technician console position, who already knew of the hijacking be- 
cause less than a minute before, Joseph Cooper had spoken with TSgt. Jeremy 
Powell, and the NEADS response to the hijack notification and scramble re- 
quest had already begun. 148 

Although they were not discussed in the 9/11 Commission Final Report, 
the calls placed by Spence and by Otis Tower personnel to the operations desk 
helped expedite the response of the two Otis air alert fighter pilots to the order 
to battle stations placed by NEADS personnel at 8:41 a.m. EDT. 149 Spence did 
not know it at the time, but he speculated later that the alert pilot had "some de- 
gree of warning" of the approaching scramble order because he may have been 
at the desk when Spence called Otis Air National Guard Base. 150 Lt. Col. Tim- 
othy Duffy, the 101st Fighter Squadron's director of operations and one of two 
alert pilots at Otis on the morning of September 11, was in fact near the break 
room near the operations desk. On duty there was MSgt. Mark Rose, who re- 
ceived a call from Otis Tower relaying news from Boston Center about a possi- 
ble hijacking. Rose, the superintendent of aviation management, alerted Duffy, 
and then the call was redirected to Kelly at the Command Post. 151 

A traditional Guardsman and a pilot for a major airline, Duffy was disap- 
pointed to be on alert instead of on the flying schedule during the morning of 
September 11. As the operations officer, in charge of training, Duffy always 
warned his colleagues to be careful as they headed out for their training assign- 
ments. About ten minutes before his exchange with Rose, Duffy later recalled, 
one of his coworkers had commented on the date — 9/11 — and had said, '"Hey, 
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it's a 911 day.' You know, dial 911. Everybody be careful, not even knowing [, 
yet, about the hijacking]. . . ." 152 

Duffy did not take the news from Rose of a suspected hijacking lightly, re- 
calling later, "in an ASA [air sovereignty alert] squadron, that is not one of those 
words you throw around." In addition, Otis fighters were on five-minute alert. 
Although the squadron could not take orders from the FAA, Duffy hoped to get 
ready while awaiting NEADS instructions and the expected call to battle sta- 
tions. He, therefore, radioed his fellow alert pilot to suit up. 153 

On alert duty with Duffy, covering the shift for another pilot flying a train- 
ing mission that morning, was full-time Guardsman Maj. Daniel S. "Nasty" 
Nash. Listed as lead in the alert roster, Nash was in his office when he received 
instructions to suit up from Duffy. He learned of the possible hijacking when he 
reported to the locker room, where Duffy was already suiting up. After hearing 
of Duffy's prior hijacking experience, Nash told him to take the lead on the ex- 
pected scramble. 154 Duffy stopped in the Command Post to tell Lieutenant 
Colonel Treacy that he and Nash were swapping leads. Treacy, meanwhile, had 
telephoned the Northeast Air Defense Sector to report the FAA scramble re- 
quest. The NEADS commander, Col. Robert Marr, would have authority to 
scramble the fighters. By then, Joseph Cooper at Boston Center had spoken with 
TSgt. Jeremy Powell at NEADS. 155 Treacy was on two telephones, one to FAA 
personnel and the other to NEADS personnel, and he was "trying to get them to 
talk to each other." Treacy put the phones down and told Duffy that the hijacked 
aircraft was a 767, en route from Boston to California, and he may also have 
identified the plane as American Airlines Flight ll. 156 

Duffy then joined Nash — who at that point knew only that they were re- 
sponding to a possible hijacking — as they headed to a Ford pickup and drove to 
the alert barn. Along the way, they heard Kelly pass along an order from the 
Northeast Air Defense Sector by sounding the klaxon to alert all personnel to go 
to their battle stations. 157 As Duffy later recalled, 

we went out and hopped in the alert vehicle and were driving out 
there. We . . . [were] going like 80 [mph] — it's only about one-half 
mile. . . . We were half way there, and we hear "Alpha Kilo one two, 
battle stations." Which is good, because now [that order is] . . . com- 
ing from NEADS. So, we are no longer doing phone calls from 
Boston Center to Otis Tower to the squadron, which is the way I got 
notified. 

Duffy and Nash, having saved several minutes' time by suiting up before re- 
ceiving the order to battle stations, then hopped into their jets, strapped in, and 
waited for further orders. Duffy had time to tell his crew chief, SMSgt. Wing K. 
Ng, waiting at the bottom of his ladder, that there was a suspected hijacking of 
a 767 out of Boston. 158 
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As these details reveal, after determining that American Airlines Flight 1 1 
was a possible hijack, FAA air traffic control staff at the Boston Air Route Traf- 
fic Control Center launched two efforts, in parallel lines of communication to 
Otis Air National Guard Base and to the Northeast Air Defense Sector, to try to 
get fighters scrambled. 159 Boston Center's telephone calls to Otis helped expe- 
dite the response of the two air alert pilots on duty at the base on the morning 
of September 11. This hijack notification and request for fighter assistance — 
which passed from FAA personnel directly to Air Force personnel and outside 
the prescribed antihijacking protocol — enabled Duffy and Nash to suit up and 
head toward their fighters in advance of a NEADS order to battle stations. 160 

Meanwhile, in Rome, New York, NEADS battle commander Colonel Marr 
learned from a subordinate of Boston Center's call and its scramble request. 
Confirming that the hijacking was "real world" and not part of the morning's 
Vigilant Guardian exercise, Marr put the Otis fighters on battle stations. Doing 
so, he recalled later, saved "about three minutes from the scramble time." 161 

Marr then informed the Continental U.S. Region of NORAD of the pos- 
sible hijacking. He reached CONR headquarters at Tyndall Air Force Base, 
Florida, and spoke first with Lt. Col. Randy "Cat" Morris, the deputy director 
of fighter operations. Referring to his decision to place the two Otis air alert 
fighters at battle stations, Marr told Morris about the FAA request for assistance 
and indicated that "NEADS was 'forward leaning' fighters from Otis." After 
speaking with Marr, Morris directed that the Vigilant Guardian exercise be sus- 
pended. 162 Morris later recalled that "The CONR staff had no real[-]time situa- 
tional awareness." They received information on 9/11 from several sources, 
including multiple chat channels and secure telephones, CNN, and the three 
CONR sectors. 163 

Shortly thereafter, Marr spoke with Maj. Gen. Larry K. Arnold, the First 
Air Force and CONR commander, and told him of these developments. 164 Marr 
sought and received Arnold's authorization to scramble the fighters to intercept 
the hijacked aircraft. Both men were well aware, as Morris had pointed out to 
Marr, that hijacking was considered a law enforcement issue, and they realized 
that a number of notifications and clearances — from the FAA to the National 
Military Command Center and all the way up to the Office of the Secretary of 
Defense — were required under the federal government's antihijacking protocol 
before a scramble could be launched. But Arnold decided that the scramble 
should proceed and that they would "get permission later." Arnold later recalled, 
"We didn't wait for that. We scrambled the aircraft, told them get airborne, and 
we would seek clearances later." 165 

Because Arnold, Marr, and the NEADS air defenders did not know the 
precise location of American Airlines Flight 11, Arnold authorized Marr to 
scramble the two Otis F-15s toward Warning Area 105, also known as Whiskey 
105. 166 This military-controlled airspace extended over an area of the Atlantic 
Ocean south of Martha's Vineyard and covered nearly to New York City. 167 
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Arnold and Marr intended to keep the Otis fighters in Whiskey 105 while staff 
obtained further information on the track of the hijacked aircraft. 168 In Arnold's 
view, the scramble would be conducted in cooperation with the FAA, and "the 
only order the pilots had from CONR was to hold over the water until further di- 
rected." 169 However, Marr believed, in the circumstances prevailing that morn- 
ing and without knowing the location of the hijacked plane, that the NEADS 
mission crew commander, Maj. Kevin Nasypany, had "the discretion to take the 
Otis fighters directly to New York City." 170 

After their conversation, Marr passed the order directing the flight of the 
two Otis F-15s to scramble to Nasypany, 171 and Arnold called NORAD. The 
NORAD battle staff was in place at Cheyenne Mountain Operations Center 
(CMOC) because of the Vigilant Guardian exercise and NORAD's Operation 
Northern Denial. Arnold later recalled that he spoke with an unnamed deputy 
commander for operations, 172 who told the CONR commander to proceed with 
the scramble and said that NORAD staff would contact the Pentagon — specifi- 
cally, the National Military Command Center — to get the clearances. Arnold ap- 
parently also spoke with Maj. Gen. Eric A. Findley, Canadian Forces, the CMOC 
battle staff director and NORAD director of operations to facilitate getting the 
clearances. 173 In accordance with NORAD procedures, 174 Findley contacted 
NORAD commander Gen. Ralph E. Eberhart. 175 

Minutes after Nasypany' s scramble order, and as Duffy and Nash were 
preparing to take off, Boston Center reported to NEADS personnel that a plane, 
possibly a 737, had crashed into the World Trade Center. Nasypany realized that 
the report was unconfirmed and might be inaccurate but also that the destroyed 
aircraft might be American Airlines Flight 11. Noting that the flight's last re- 
ported position was south of John F. Kennedy Airport, Nasypany directed his 
staff to continue to work with FAA air traffic controllers to clear the Otis F-15s 
to the New York City area. 176 

The Otis fighters, designated Panta 45 and 46, were airborne at 8:52 a.m. 
EDT. 177 Unbeknownst to the pilots, their target, American Airlines Flight 11, 
had crashed into the north tower of the World Trade Center six minutes earlier, 
at 8:46:25 EDT, less than a minute after Duffy and Nash had received the scram- 
ble order. 178 Nash later recalled that he and Duffy "were up even before the jets' 
radar kicked in." 179 Nasypany and the NEADS air defenders initially headed 
them over water toward New York City. "[T]he original flight strip for the fight- 
ers gave a destination of Kennedy Airport." 180 The Otis fighters headed north- 
east, the fastest route from the runway, made a tight turn, and headed toward 
their assigned vector. 181 

Just over three minutes into their flight, Duffy learned from Boston Cen- 
ter, Cape Sector, that American Airlines Flight 1 1 had crashed into the World 
Trade Center. Its demise suddenly called into question the Panta flight's mis- 
sion. Duffy consulted with NEADS personnel, who told him, "the mission is 
holding." 182 Nasypany, on a phone with Marr in the battle cab, quickly deter- 
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mined that the Panta flight should — in the absence now of any target and to 
avoid heavily congested civilian airspace in the New York area — proceed to 
Whiskey 105 and remain in a holding pattern, at an altitude to be chosen by 
Boston Center, south of the Long Island coast. 183 

The upper stories of the North Tower were on fire, but the attack on the 
United States was not over. Unbeknownst to Boston Center, Duffy, Nash, and 
NEADS and CONR personnel, including Marr, Nasypany, and Arnold, another 
commandeered plane, in its final two minutes of flight, was bearing down on the 
south tower of the World Trade Center. Within minutes, the mission of the Otis 
fighters would change from holding in military airspace off Long Island to fly- 
ing over Manhattan. 

United Airlines Flight 1 75 

The Federal Aviation Administration notified the Northeast Air Defense 
Sector of a "second possible hijack" almost simultaneously with the crash of 
United Airlines Flight 175 into the South Tower. 184 United Airlines Flight 175, 
a Boeing 767-222, 185 was scheduled to depart Boston Logan International Air- 
port at 8:00 a.m. EDT on a nonstop flight to Los Angeles International Airport. 
It pushed back from the gate at 7:58 a.m. and lifted off at 8:14 a.m., at roughly 
the same moment that the hijackers on board American Airlines Flight 11 were 
launching their attack. On board United Flight 175 were a pilot, first officer, 
seven flight attendants, and fifty-six passengers, including five al Qaeda terror- 
ists. 186 Twenty-four minutes into the flight, the cockpit crew responded in the af- 
firmative to air traffic controller David Bottiglia at New York Air Route Traffic 
Control Center, at Ronkonkoma, on Long Island, who had asked if they had 
spotted American Airlines Flight 11. Bottiglia, as it happened, was assigned to 
both aircraft that morning. Twenty-eight minutes into the flight, in their last rou- 
tine communication with Bottiglia, the cockpit crew members of United Flight 
175 completed their report on the "suspicious transmission" from an unidenti- 
fied plane that they had heard shortly after departing Boston. This was later de- 
termined to have been Atta's first announcement from the cockpit of American 
Airlines Flight 11. Investigators, including the 9/11 Commission, later concluded 
that the hijackers aboard United Flight 175 probably launched their assault only 
seconds after the communication with Bottiglia, sometime between 8:42 and 
8:46 a.m. EDT (see Table 4, United Airlines Flight 175 and 9/11 Commission 
Timeline, p 57). 187 

The first signs of trouble on board United Airlines Flight 175 came very 
quickly. First, the aircraft turned southwest without clearance. Then, at 8:46:48 
a.m. EDT, seconds after American Airlines Flight 1 1 hit the North Tower, some- 
one in the cockpit of United Flight 175 made the first of two rapid changes to 
its assigned transponder code. The flight also left its assigned altitude. Under 
normal circumstances, New York Center's Dave Bottiglia would have quickly 
noticed these developments, but he was involved in the ongoing search for the 
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possibly hijacked American Flight 11. This task preoccupied him, particularly 
when he lost the radar feed on the American plane's primary track at 8:46:31. 
Bottiglia remained focused on American Flight 11, as reports came in about a 
fire at the World Trade Center, and, thereafter, as he continued to hunt for the 
plane, which he thought was heading south at a low altitude. About five minutes 
later, he noticed the changes to the United flight's transponder and repeatedly 
tried to contact the cockpit crew. At 8:53 a.m., just after the Otis F-15s were 
airborne and as radio reports began coming in about the crash of a commuter 
plane at the World Trade Center, Bottiglia warned another controller that he 
could not find United Flight 175 and that he feared it had been hijacked. This 
news, and the notion that military assistance was needed in the escalating situ- 
ation, began to filter up over the next several minutes through the various lev- 
els of senior managers at New York Center, who then tried to contact regional 
managers. 188 They, however, "were discussing a hijacked aircraft (presumably 
American Flight 11) and refused to be disturbed." 189 

Ten minutes would pass before a New York Center staffer informed the 
NEADS air defenders of a "second possible hijack." 190 Just seconds later, they 
learned that a second plane, quickly identified as United Airlines Flight 175, 
had slammed into the South Tower at 9:03:11 EDT. 191 Nasypany, on the phone 
with Marr, told the battle commander that NEADS personnel had received an un- 
confirmed report of a "second hit from another aircraft." Marr, in the battle cab, 
and several other NEADS personnel had just seen the crash, live on CNN. The 
Otis fighters were at that moment south of Long Island, 192 and NEADS person- 
nel were making an early effort to locate refueling tankers for them. 193 

The north and south towers of the World Trade Center were burning. Con- 
cerned that more aircraft out of Boston Logan Airport or elsewhere might still 
be "out there," hijacked and heading toward New York City, Nasypany wanted 
to move the Otis fighters out of military airspace in Whiskey 105 and place 
them, in coordination with FAA controllers, over Manhattan. 194 

Seeking "to establish a greater presence over New York," Nasypany also 
told the battle cab that he wanted to scramble the two armed alert F-16s at the 
119th Fighter Wing, Detachment One, at Langley Air Force Base in southern 
Virginia and send them to the same location as the Otis fighters. But the battle 
cab declined his request and directed the NEADS mission crew commander to 
order the Langley fighters only to battle stations. 195 

On the morning of September 11, 2001, Marr had at his disposal only four 
armed fighters sitting strip alert with which to defend about a quarter of the 
country. Two of these, the Otis F-15s, were already airborne and holding in 
Whiskey 105; the other two were the Langley F-16s. Concerned about the Panta 
flight's fuel situation, Marr held the Langley fighters at battle stations, seeking 
to avoid having all of his fighters "in the air at the same time, which . . . [would 
mean that] they'd all run out of gas at the same time." 196 Marr and Arnold later 
recalled that the Langley fighters were put on battle stations rather than scram- 
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bled because they might be sent to relieve the Otis fighters if NEADS person- 
nel could not find a refueling tanker quickly and also because of uncertainty 
about the developing situation in New York City. 197 Nasypany, too, recalled that 
the order to battle stations "was generated by the events taking place in New 
York." He noted that "the strategy was to 'lean forward'" in the event of another 
attack. His order sent the Langley fighters to battle stations "without a specific 
target," but he intended to use them "in response to another threat." 198 

In the meantime, no additional hijackings had been reported to NEADS. 
Nasypany's priorities were to move the Otis fighters closer to New York City, 
specifically south of Kennedy Airport, and to find and position refueling tankers 
to support them. 199 But the air defenders were merely "in the eye of the storm." 200 
Unbeknownst to Arnold, Marr, Nasypany, or any of their subordinates, there had 
already been another hijacking, the third of the morning. In the time period be- 
tween the two crashes at the World Trade Center, the Indianapolis Air Route 
Traffic Control Center had lost contact with a third aircraft, American Airlines 
Flight 77. Controllers there, unaware of the attacks in New York City, 201 initially 
believed that the plane had crashed due to electrical or mechanical trouble. Iron- 
ically, as NEADS and CONR leaders were considering ordering the Langley 
fighters to battle stations or to scramble, Indianapolis Center controllers were 
asking the Air Force Rescue Coordination Center at Langley Air Force Base to 
search for the possibly downed American flight. 202 United Airlines Flight 93, 
the fourth and final hijack, had at that point been in the air for more than twenty- 
five minutes and would be flying normally for another twenty. 203 

With FAA air traffic controllers working to clear airspace, NEADS di- 
rected the Panta flight to leave the holding pattern. The Otis F-15s arrived over 
New York City and established a combat air patrol over the city thirty-two min- 
utes after becoming airborne. 204 The Otis fighters were the first on the scene of 
the disaster and represented the initial element of the U.S. military response to 
the terrorist attacks, but their defensive measure was too late to counter even 
the second attack. By the time they arrived, United Airlines Flight 175 was no 
more, and the south tower of the World Trade Center had been ablaze for almost 
twenty-two minutes. 205 

Duffy and Nash flew combat patrols over New York for the next several 
hours. Duffy set up a point defense, splitting the airspace to cover it in its en- 
tirety, and the two Otis pilots took turns refueling and intercepting. 206 During 
their time aloft, Duffy and Nash received requests from New York TRACON to 
identify a few civilian airliners and then, mostly, police and emergency response 
helicopters in coordination with NEADS. 207 Duffy later estimated that he and 
Nash intercepted "fifty or more" targets of interest, including general aviation 
aircraft, news helicopters, and even a number of Army Guard helicopters. 208 

The lull after the two attacks at the World Trade Center did not last long. 
The fog of war had begun to settle in almost immediately after the first strike, 
and confusion over what type of aircraft had hit the North Tower and questions 



36 



about the status of American Airlines Flight 11 persisted. Then, in the minutes 
before Duffy and Nash established the combat air patrol over New York City, 
Boston Center passed to NEADS air defenders startling news from FAA head- 
quarters: American Airlines Flight 11 was still airborne and was heading south 
toward Washington, D.C. Suddenly, NEADS personnel were faced with what 
was apparently a third hijacking, as whatever plane had hit the North Tower was 
thought, by many, not to have been Flight 1 1 . 2W 

After passing the Boston Center report to the battle cab, NEADS mission 
crew commander Nasypany advised the battle commander and the fighter offi- 
cer there that NEADS needed to scramble the Langley fighters immediately. 210 
In Nasypany's view, the Langley scramble should be placed over Baltimore, 
Maryland, to serve as "a 'barrier cap' between the hijack [American Airlines 
Flight 11, thought to be still aloft] and Washington, D.C." 211 Nasypany also told 
the battle cab that he wanted to direct the Otis fighters to "try to chase this guy 
[American Airlines Flight 11] down" if the aircraft could be found. 212 

But battle cab personnel were unenthusiastic about the latter recommen- 
dation. 213 Marr, the battle commander, later recalled that "he 'nixed' the tail 
chase — the Panta (Otis ANGB) fighters 'chasing down' A[merican] A[irlines 
Flight] 11, as reported heading south to Washington, D.C. — 'as soon as' he heard 
of it." 214 Nasypany was, nevertheless, still concerned about the placement of the 
Panta flight. He told his weapons team that he wanted the Otis fighters closer to 
New York and was pleased to learn that they were already over it. 215 Nasypany's 
views on use of the Langley fighters were accepted by the battle cab, and Arnold 
and Marr approved scrambling the two fully armed Langley fighters on alert 
and a third F-16 armed with guns. 216 

On duty on the morning of September 11, 2001, at the Air National Guard 
detachment at Langley Air Force Base, were the senior and junior alert pilots, 
Maj. Dean F. Eckmann, a traditional Guardsman and commercial airline pilot, 
and Maj. Bradley M. "Lou" Derrig, a full-time Guardsman. On their schedule 
was a local training mission with Langley fighters from the First Fighter Wing, 
scheduled for a noon takeoff. After they received Nasypany's battle stations 
order, they were joined — as the result of an unprecedented order given by an 
officer in the NEADS battle cab — by the supervisor of flying, Capt. Craig D. 
"Borgy" Borgstrom, a full-time Guardsman. 217 Nasypany ordered the Langley 
alert fighters scrambled and headed toward Washington, D.C, under the call 
signs Quit 25 and 26, with Borgstrom as the pilot of a third fighter, Quit 27. The 
three Langley F-16s were airborne at 9:30 a.m. EDT. 218 Borgstrom later recalled 
that the Quit flight had "no mission on takeoff." 219 

Nasypany's original scramble order called for the Langley fighters to pro- 
ceed on a 010 heading, flight level 290. 220 However, standard scramble proce- 
dures called for a takeoff to the east, toward Warning Area 386, 221 to get air 
defense fighters to altitude quickly and to avoid highly congested local airport 
traffic. With these and other considerations in mind, and not knowing about any 
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additional hijackings or problematic aircraft, Langley Tower personnel entered 
a flight plan that directed the Quit flight to a heading of 090 for 60, or due east 
for sixty miles, flight level 290. 222 Eckmann later estimated that the Quit flight 
traveled east for forty-five miles before FAA air traffic controllers got them 
headed north, but the route as captured by radar indicated that the distance was 
sixty-nine nautical miles. 223 

Within a few minutes of the Langley fighters' takeoff, NEADS weapons 
desk personnel noticed that the Quit flight was off course and was not traveling 
in accordance with the scramble order. They immediately directed a U.S. Navy 
air traffic controller at Giant Killer to tell the Langley pilots to contact the 
NEADS air defenders on an auxiliary frequency and to redirect the flight to- 
ward Baltimore Washington International Airport, to intercept the phantom, pre- 
sumed southbound, American Airlines Flight ll. 224 

American Airlines Flight 77 

During a telephone call about American Airlines Flight 1 1 from the FAA's 
Washington Center to the Northeast Air Defense Sector, 225 the center's opera- 
tions manager happened to mention to the air defenders that American Airlines 
Flight 77 was missing. The manager did not describe it as a hijacking. Less than 
four minutes later, Flight 77 crashed into the Pentagon. 226 

American Airlines Flight 77, a Boeing 757-223, 227 was scheduled to depart 
Washington Dulles International Airport at 8: 10 a.m. EDT on a nonstop flight to 
Los Angeles International Airport. It pushed back from the gate at 8:09 a.m. and 
lifted off at 8:20 a.m. On board were a pilot, first officer, four flight attendants, 
and fifty-eight passengers, including five al Qaeda terrorists. 228 The flight pro- 
ceeded normally until 8:51 a.m., when the cockpit crew made its last routine 
radio communication with Indianapolis Air Traffic Control Center. The hijack- 
ers attacked shortly thereafter. By 8:54 a.m., the aircraft was making a slight 
turn to the south, away from its assigned course. Three minutes later, someone 
in the cockpit turned off the transponder, and that individual or another — un- 
derstanding the plane's internal communication system better than had the hi- 
jackers of American Airlines Flight 11 — announced to the passengers over the 
plane's intercom that the flight had been hijacked. Ground control did not hear 
that communication. John Thomas, the Indianapolis Center controller tracking 
American Flight 77, noticed that the aircraft had deviated from its flight path and 
that the data tag disappeared. He could not find a primary radar return. Thomas, 
and soon thereafter, American Airlines dispatchers, tried repeatedly and unsuc- 
cessfully to contact the cockpit crew of American Flight 77 by radio. He and 
others at the center looked for the aircraft along its projected flight path and to 
the southwest, where it had started to alter course, but they did not look to the 
east. At that point, he did not know about the crashes at the World Trade Center 
or about any of the day's hijackings. He believed that American Flight 77 had 
gone down after suffering either a catastrophic mechanical or electrical failure, 
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or both. Indianapolis Center contacted the Air Force Rescue Coordination Cen- 
ter at Langley Air Force Base at 9:08 a.m. and asked the service to search for a 
crashed airplane {see Table 5, American Airlines Flight 77 and 9/11 Commission 
Timeline, p 58). 229 

Meanwhile, the hijacker-pilot had further adjusted the aircraft's course, 
and the plane flew eastward, undetected for thirty-six minutes. Indianapolis Cen- 
ter personnel never saw the flight turn to the east. Initially, for more than eight 
minutes after the loss of its transponder, the flight's primary radar information 
was not displayed to Indianapolis Center controllers, in part because of poor 
radar coverage in its flight area. When American Flight 77 reappeared in primary 
radar coverage, a few minutes before Indianapolis Center contacted the Air Force 
Rescue and Coordination Center, Indianapolis Center controllers did not see it: 
they thought that the plane had crashed or was still heading west. By 9:20 a.m., 
Indianapolis Center staff had learned that other aircraft had been hijacked that 
morning, and they began thinking that American Flight 77 might have been as 
well. Information and concerns about the flight's status passed from the Indi- 
anapolis manager to the FAA Command Center at Herndon, to FAA field facil- 
ities, and even to FAA headquarters in Washington, D.C., but no one thought to 
ask for military assistance, and no one contacted NEADS. The Herndon com- 
mand center did alert the terminal control facility at Dulles International Air- 
port at 9:21 a.m. After several of its controllers found, at 9:32 a.m., an 
unidentified primary radar target traveling fast and east, Dulles notified Reagan 
National Airport, and FAA staff at both airports alerted a federal law enforcement 
agency charged with protecting the president. 230 

Around 9:34 a.m., as NEADS air defenders told a Navy air traffic con- 
troller at Giant Killer to redirect the Langley pilots toward Baltimore to intercept 
what was thought to be a southbound American Airlines Flight 1 1 , NEADS iden- 
tification desk personnel learned in a telephone call from the operations manager 
at Washington Center that Indianapolis Center had lost contact with American 
Airlines Flight 77. This, in fact, had happened forty minutes earlier, but during 
that time, the FAA had not so informed NEADS. During the phone call, Amer- 
ican Flight 77 was not described as a possible hijacking. 231 

Just over a minute later, Boston Center told NEADS personnel that an 
unidentified aircraft — later determined to be the missing and presumed crashed 
American Airlines Flight 77 — was six miles southeast of the White House, fly- 
ing low and moving away. 232 Given the speed at which airliners travel, this 
meant, as Nasypany later recalled, that a possible attack was seconds away from 
the White House. 233 This threat ratcheted up the efforts of the NEADS air de- 
fenders to expedite the change of course for the Langley fighters and to get them 
over the Washington, D.C., area and to the White House as quickly and as di- 
rectly as possible. 234 Nasypany, working with his weapons and surveillance 
teams, took the unusual step of declaring AFIO, authorization for interceptor 
operations, 235 a rarely used process by which NEADS air defenders could take, 
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from FAA controllers, "immediate control of the airspace to clear a flight path 
for the Langley fighters." 236 

Almost exactly sixty minutes elapsed from the time NEADS personnel 
first learned from FAA air traffic controllers of the possible hijacking of Amer- 
ican Airlines Flight 11 until Nasypany declared AFIO. During that hour, the 
NEADS air defenders had been dealing with five possible or actual aviation 
emergencies. The first was American Airlines Flight 11, thought by some to have 
been the plane that hit the north tower of the World Trade Center but was re- 
portedly still airborne. 237 The second was the crash of a still-unidentified, still- 
unconfirmed plane at the North Tower. The third was the hijacking and crash of 
United Airlines Flight 175 at the South Tower. The fourth was the lost — that is, 
missing — American Airlines Flight 77. The fifth was the unidentified, low-fly- 
ing aircraft moving away from the White House. Unbeknownst to anyone in the 
country — perhaps even to the hijacking planners themselves, who may have in- 
tended additional hijackings — the actual attacks would be over in less than thirty 
minutes. However, reports of suspected hijackings were only just beginning. 

Immediately after the NEADS air defenders learned of the presence of the 
unknown deviating aircraft over Washington, D.C., the tracker technician who 
had been assigned by Nasypany to monitor the airspace over the general capi- 
tal area spotted on radar what NEADS personnel believed was the errant plane. 
He established a primary radar track on the aircraft, Bravo 032, and observed it 
losing altitude. The technician lost it when the track faded quickly. 238 

Nasypany directed the technician to get a Z-point, or coordinate, on the 
vanished aircraft and then asked where the Langley fighters were located. 239 The 
Quit flight was, in fact, in Warning Area 386 and heading north, approximately 
150 miles away from Washington, D.C. Nasypany, the NEADS air defenders, 
and Langley pilots Eckmann, Derrig, and Borgstrom did not know that the 
unidentified aircraft — American Airlines Flight 77 — had slammed into the west 
side of the Pentagon at 9:37:46 a.m. EDT. 240 Its demise was confirmed by the 
crew of an unarmed National Guard C-130H cargo aircraft, which had spotted 
the flight shortly before impact. That crew, en route to Minnesota, would also re- 
port on the crash of United Airlines Flight 93, less than thirty minutes later. 241 

Seeking to expedite the arrival of the Langley fighters to the capital to in- 
tercept the unidentified aircraft, believed to be still airborne, Nasypany told his 
subordinates on the operations floor: "We need to get those back up there — I 
don't care how many windows you break!" 242 The mission crew commander 
later explained that his words were meant as "a direction for the Langley fight- 
ers to achieve supersonic speed." 243 

Because of limited communications, a mix-up in passing coordinates, and 
other issues, NEADS personnel could not fully or immediately implement Nasy- 
pany 's intention or his declaration of authorization for interceptor operations. 
Northeast Air Defense Sector weapons technicians controlling the Langley 
flight, for example, had initially to relay communications — including heading 
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and squawk information — through another aircraft and were not speaking di- 
rectly with flight lead Eckmann, Quit 25, until several minutes after Nasypany's 
AFIO declaration. 244 

The NEADS air defenders first learned about the attack on the Pentagon 
from CNN about twelve minutes after American Airlines Flight 77 plowed into 
the west side of the building. 245 Also at 9:49 a.m. EDT, NORAD commander 
General Eberhart "directed all air sovereignty aircraft to battle stations, fully 
armed." 246 NEADS personnel were unaware of this order, at least initially. Still 
working with his standard four air alert aircraft, Nasypany again wondered about 
the location of the Langley fighters and twice expressed direction to place the 
Otis flight "over NCA [National Capital Area] now[.]" 247 But according to radar 
data, the Langley fighters did not arrive over Washington, D.C., until about 10:00 
a.m. EDT. 248 Just under five minutes later, Quit 25 confirmed, in response to a 
NEADS query, that there was "smoke coming from the Pentagon[.]" 249 

United Airlines Flight 93 

NEADS operations center personnel were not aware that United Airlines 
Flight 93 had been hijacked until just over four minutes after it had slammed into 
an abandoned strip mine 250 in Pennsylvania. Word of United Airlines Flight 93's 
last known latitude and longitude came during a call from a military liaison at- 
tached to the Federal Aviation Administration who was himself unaware that 
the aircraft had crashed. Twelve minutes after the crash, during a call initiated 
by the Northeast Air Defense Sector, the FAA informed the air defenders that the 
flight had gone down at an unknown location northeast of Camp David. 251 

United Airlines Flight 93, a Boeing 757-222, 252 was scheduled to depart 
Newark Liberty International Airport at 8:00 a.m. EDT on a nonstop flight to San 
Francisco International Airport. It pushed back from the gate at 8 :00 a.m. but did 
not lift off until 8:42 a.m. On board were a pilot, first officer, five flight atten- 
dants, and thirty-seven passengers, including four al Qaeda terrorists. The flight 
proceeded normally for forty-six minutes, and the last routine communication 
between the flight deck and John Werth, the air traffic controller at Cleveland 
Air Route Traffic Control Center responsible for the flight, came at 9:25 a.m. At 
that point, the cockpit and cabin crews knew nothing of the morning's three hi- 
jackings or of the explosions in New York City. At 9:28 a.m., while the aircraft 
was flying at 35,000 feet over eastern Ohio, the hijackers attacked the cockpit 
crew. A struggle ensued. Just two minutes earlier, United Flight 93 pilot Jason 
Dahl had sent an ACARS* message asking United dispatcher Ed Ballinger to 
confirm a warning that Ballinger had just sent to the flight deck crew: "Beware 
any cockpit intrusion — Two a/c [aircraft] hit World Trade Center" {see Table 6, 
United Airlines Flight 93 and 9/11 Commission Timeline, p 59). 253 

In less than a minute of Dahl's ACARS message to Ballinger, Werth at 
Cleveland Center received two radio transmissions of unknown origin. The first 
contained sounds of a physical struggle and declarations of "Mayday," and the 

*ACARS (Aircraft Communications and Reporting System) permits e-mailing between the in-flight 
cockpit crew and ground personnel. 
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second, shouts of "Hey get out of here" and screaming. 254 The aircraft's altitude 
suddenly dropped seven hundred feet. Werth began to contact other planes on his 
frequency to determine the source of the transmissions and continued to try to 
contact United Flight 93. A third radio transmission came over the frequency at 
9:32 a.m.: "Keep remaining sitting. We have a bomb on board." 255 Like Mo- 
hammed Atta, the hijacker-pilot of American Airlines Flight 11, Ziad Jarrah, at 
the controls of United Flight 93, attempted to communicate with the passengers 
over the plane's intercom but ended up speaking to air traffic controllers on the 
ground. Werth told his supervisor that he thought the plane had been hijacked. 
Within two minutes, the information traveled up the chain of command to the 
command center at Herndon and then to FAA headquarters. 256 

There the information remained. Cleveland Center personnel, still track- 
ing the United flight, asked the Herndon command center about 9:36 a.m. if 
anyone had asked the military to send fighters to intercept it and even offered to 
contact a local military base. The command center refused the offer, saying that 
FAA senior leaders had to make the decision to request military assistance and 
that they were discussing the matter. Eventually, Cleveland Center personnel 
took matters into their own hands and contacted NEADS personnel, but by then, 
United Airlines Flight 93 had already crashed. Meanwhile, thirteen minutes after 
Cleveland Center's initial inquiry about military involvement, the command 
center suggested to headquarters that someone there should probably decide, 
within the next ten minutes, whether to ask the military to scramble aircraft. 
Discussions at headquarters were ongoing between the deputy director for air 
traffic services and Monte Belger, the acting deputy administrator. 257 

The hijackers, however, had turned off the transponder on board United 
Flight 93, but not until 9:41, two minutes after a fourth radio transmission from 
Jarrah. The hijacker-pilot had intended to tell the passengers to remain seated and 
that the hijackers were returning to the airport to lodge their "demands," but this 
time, too, he pushed the wrong button and ended up again speaking to John 
Werth at Cleveland Center. Werth located the plane's primary radar return and 
tracked it as it altered course to the east and then to the south. 258 

At the same time that the Quit flight reached the nation's capital, and un- 
beknownst to NEADS personnel and the Langley pilots, the fourth and last plane 
hijacked on the morning of September 11 was in its final minutes of flight. Pas- 
sengers and surviving crew on board United Airlines Flight 93 had already begun 
an assault on the cockpit in an attempt to wrest control of the plane from the 
four hijackers who had taken it over a little more than thirty minutes earlier. 259 
The plane crashed in a field near Shanksville, Pennsylvania, at 10:03:11 a.m. 
EDT. 260 The NEADS air defenders did not learn until over three minutes later, 
in a telephone call from Cleveland Center's military liaison, that Flight 93 had 
even been hijacked. 261 

They had, however, heard about another possible hijack. Minutes after re- 
ceiving the report of an unidentified aircraft near the White House and hearing 
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Nasypany's AFIO declaration, NEADS identification technicians learned from 
the FAA military liaison at Boston Center of the possible hijacking of Delta Air- 
lines Flight 1989, then flying south of Cleveland, Ohio. 262 Its intentions were 
unknown, and it fit the profile of known hijackings up to that point on Septem- 
ber 11. Like American Airlines Flight 11 and United Airlines Flight 175, the 
Delta plane was a Boeing 767 and had departed Boston Logan International Air- 
port minutes after the American and United flights, full of fuel for a transconti- 
nental journey, to Los Angeles. 263 But the Delta flight, despite its similarities to 
the first two commandeered aircraft, was not a hijacking at all. Its transponder 
had not been turned off or altered, and so FAA and NEADS personnel found 
and tracked it easily; its cockpit crew maintained communications with FAA air 
traffic controllers; and its alterations in course were a result of controllers' in- 
structions to avoid colliding with United Airlines Flight 93, the hijacking of 
which FAA staff were aware but of which military personnel were not. 264 

In accordance with NEADS antihijacking protocol checklists, NEADS 
personnel did two things with respect to Delta Airlines Flight 1989 that were 
not done in connection with any of the aircraft hijacked on September 11. First, 
they designated Delta Airlines Flight 1989 a "Special 15" classification to aid in 
its tracking. Second, they not only established a track on the Delta flight, Bravo 
089, but they also "forward told" the flight's track to NORAD. 265 Under agreed- 
upon procedures of the FAA and the DOD, whenever a hijacking occurred within 
radar coverage of one of the NORAD air defense sectors, the sector would for- 
ward — or "forward tell" — reports on the position of the errant plane to the 
Cheyenne Mountain Operations Center. 266 

As Delta Airlines Flight 1989 continued south of Toledo and then over 
Detroit, heading toward Chicago — raising a concern about a possible attack on 
Sears Tower — Nasypany and his air defenders were contacting other Air Na- 
tional Guard bases in the Great Lakes region and beyond — beginning with 
Toledo, Syracuse, Duluth, and Selfridge — to inquire about scrambling fighters. 
With the two Otis fighters over New York City, and the three Langley fighters 
heading toward Washington, D.C., Nasypany and Marr had to look beyond this 
small complement to ask for assistance from units that were not part of the na- 
tion's air defense alert force. Personnel at NEADS mentioned first the 180th 
Fighter Wing, an Ohio Air National Guard unit based at Toledo Express Airport, 
as a possible source for additional aircraft, and the wing got two F-16s airborne 
at 10: 17 a.m. EDT Nasypany quickly obtained an offer from the 127th Wing, a 
Michigan Air National Guard unit at Selfridge Air National Guard Base, of two 
F-16s that were in the air on a training mission, on which they had already ex- 
pended their ordnance. 267 Cleveland Center personnel then asked about which 
fighters were being sent to intercept Delta Airlines Flight 1989 and how long it 
would take. With fighters at Duluth unavailable, Nasypany called his counter- 
part at the Western Air Defense Sector, who agreed to bring two armed fighters 
up at Fargo. 268 
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By 10:00 a.m., as a result of concerns over the status of Delta Airlines 
Flight 1989, two Selfridge fighters were already airborne, and Toledo and Fargo 
promised two more each. Also available to Nasypany would soon be two F-16s, 
with guns, from Springfield, Ohio, that were returning from deployment at the 
Alpena Combat Readiness Training Center, as well as fighters from the Atlantic 
City Air National Guard. 269 Before ten minutes had passed, Nasypany's direct 
contact with the Western Air Defense Sector resulted in an offer of two additional 
fighters at Sioux City, Iowa. 270 

Meanwhile, Delta Airlines Flight 1989's transponder continued to function 
properly, and NEADS and FAA personnel continued to follow its flight path. It 
was, thus, the first questionable flight of the morning that might actually have 
been intercepted by aerial forces, at least two of which had weapons on board, 
before something untoward happened. It remained unclear, however, what if 
anything the pilots of those fighters should or could do if the flight proved to be 
hijacked or showed hostile intent. Seeking guidance from the battle cab on rules 
of engagement, Nasypany asked, "That special track over the . . . lake right now 
[Delta Flight 1989], so what are you gonna do with it, if it is [hijacked]. . . [?] 
What are we gonna do, I['ve] got to give my guys direction[.]" 271 The question 
remained unresolved during the entire attack period and for some time beyond. 

At the same time that Nasypany and the battle cab were discussing what 
orders to pass to fighter pilots being scrambled against the Delta flight, the 
NEADS identification section was learning from Cleveland Center that the flight 
was in fact not hijacked. An identification team member had called the center to 
tell controllers there that two fighters each from Selfridge and Toledo had been 
scrambled in response to the Delta flight. She was surprised to learn from a cen- 
ter staffer that the Delta pilot was not being hijacked and was landing at Cleve- 
land Airport "as a precaution because he took off from [Boston Logan.]" 272 

The simultaneous nature and speed of the 9/11 attacks made it increas- 
ingly difficult for the NEADS air defenders to keep an accurate count of the 
number of suspected hijackings. Misinformation about American Airlines Flight 
11 's being still airborne and about the possible hijacking of Delta Airlines Flight 
1989 contributed to the fog of war. The pace of events slowed very briefly after 
the news from Cleveland Center that Flight 1989 was going to land without in- 
cident. But NEADS staff had at most only a few minutes' respite before they re- 
ceived a report from a NORAD unit in Canada that a Canadian commercial 
airliner, possibly hijacked and possibly out of Montreal, might be headed south 
toward Washington, D.C. 273 In the NEADS battle cab, Marr initially wanted 
New York Air National Guard fighters at Hancock Field, Syracuse, New York, 
to be sent against the Canadian flight. 274 

These plans changed quickly, however, when, within seconds, the NEADS 
air defenders faced a confirmed threat against a commercial aircraft much closer 
to home. Immediately after speaking with a Canadian NORAD staffer about the 
Canadian flight, a NEADS identification technician received from the military 
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liaison at Cleveland Center a confirmed report of a bomb on board a non- 
transponding aircraft, United Airlines Flight 93. The military liaison asked about 
the possibility of redirecting to the last known location of the United flight the 
fighters from Selfridge and Toledo that had been scrambled against Delta Air- 
lines Flight 1989. The terrible irony of this request was that, unbeknownst to 
Cleveland Center, United Airlines Flight 93 had crashed near Shanksville, Penn- 
sylvania, over three minutes earlier, at 10:03:11 a.m. EDT. 275 

Shortly thereafter, Nasypany received a commitment from the Syracuse 
Air National Guard unit to launch four fighters, with hot guns, to search for 
United Airlines Flight 93 and Delta Airlines Flight 1989. 276 However, a NEADS 
identification technician then learned from the FAA's Washington Center that 
United Airlines Flight 93 had crashed. 277 The Syracuse fighters deployed at 10:44 
a.m. EDT, more than forty minutes after Flight 93 crashed and more than fifteen 
minutes after the North Tower collapsed. 278 

The Immediate Post-Attack Period 

The attacks of September 11, 2001, ended with the downing of United 
Airlines Flight 93, but no one knew that at the time. Nasypany, among others, 
had been concerned, after the strikes in New York City, that additional planes de- 
parting Boston might be hijacked, 279 and, later in the morning, that further attacks 
might be launched, in a cascading fashion, across the western time zones and 
perhaps overseas. Reports of additional possible hijackings and other suspicious 
incidents did continue for hours and even days thereafter. 280 

Just after Duffy and Nash were scrambled, six additional unarmed Otis 
F-15s had taken off on a training run to Warning Area 105. As they were flying 
over Martha's Vineyard, Lieutenant Colonel Treacy ordered them to return to 
Otis immediately. 281 By about 10:20 a.m., after Treacy had briefed the returning 
pilots about additional expected threats, a NEADS weapons controller called 
Otis Air National Guard Base on the scramble line and told personnel there to 
get all fighters in the air immediately. However, maintenance crews had dis- 
covered after the fighters returned from their training run that two of the six 
F-15s needed mechanical repairs before they could fly again. The four others — 
after all were refueled and at least some were armed — received orders to scram- 
ble and to establish combat air patrols over Boston. Thereafter, two of those 
fighters proceeded under orders to New York City "to work with, and then re- 
lieve" Duffy and Nash. 282 

District of Columbia Air National Guard F-16s of the 113th Wing, 121st 
Fighter Squadron, became involved in air defense operations over Washington, 
D.C., in the post-attack period. The 121st Fighter Squadron, based at Andrews 
Air Force Base, Maryland, was not an air defense alert unit. 283 Its personnel nev- 
ertheless responded when, about twenty minutes after American Airlines Flight 
77 hit the Pentagon, the squadron received a White House request for a combat 
air patrol over the nation's capital. 284 The first of the Andrews fighters was air- 
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borne at 10:38 a.m. EDT, about thirty-five minutes after United Airlines Flight 
93 crashed in Pennsylvania and ten minutes after the North Tower collapsed. 
The actual request for the Andrews F-16s had come from the federal law en- 
forcement agency charged with protecting the president, not from within the 
military chain of command, and the fighters were dispatched without the fore- 
knowledge of NEADS, NORAD headquarters, or military personnel at the 
NMCC at the Pentagon. Unbeknownst to those entities, most of the Andrews 
pilots scrambled on September 1 1 operated under instructions — given by that 
federal law enforcement agency to the 113th Wing commander, Brig. Gen. 
David F. Wherley, Jr. — that directed pilots "to protect the White House and take 
out any aircraft that threatened the Capitol." Wherley took this guidance to mean 
that the pilots were to fly "weapons free," that is, the shoot-down decision rested 
in the cockpit, specifically with the lead pilot, and he passed those orders to the 
pilots who took off at and after 10:42 a.m. EDT. These rules of engagement were 
quite different from those fighters launched under NORAD direction and are 
indicative of the chaos and turbulence engendered by the 9/11 attacks. 285 

Epilogue 

The scope, complexity, and outcome of the 9/11 attacks were shocking 
and, seemingly, new and unprecedented. However, much about the terrorist op- 
eration — its connections with previous acts of Islamist terrorism, its perpetrators, 
their motivations, their tactics, and their targets — was not. 

Of the nineteen hijackers, fifteen were Saudi nationals; two were United 
Arab Emirati nationals; one was a Lebanese national; and one, their leader, was 
an Egyptian national. The last, Mohammed Atta, was the operational head of al 
Qaeda's 9/11 "martyrdom operation" and the hijacker-pilot of American Air- 
lines Flight 11, which crashed into World Trade Center 1, the north tower, in the 
first attack. 286 Behind the 9/11 hijackers stood a wider circle of instigators, plan- 
ners, and accomplices, including Islamist regimes in Sudan and later in Afghan- 
istan that gave al Qaeda safe harbor. 

Even as the 9/11 attacks were unfolding, observers noted parallels to pre- 
vious attacks planned by Osama bin Laden and executed by his al Qaeda net- 
work, 287 particularly the coordinated, nearly simultaneous bombings of two U.S. 
embassies in Kenya and Tanzania on August 7, 1998. Those attacks had come 
eight years to the day after Operation Desert Shield began and the first U.S. 
forces — F-15 fighters from Langley Air Force Base, Virginia — arrived in Saudi 
Arabia to protect the kingdom against a possible invasion by Saddam Hussein. 288 
In the eyes of bin Laden and other Islamists, U.S. and other non- Muslim coali- 
tion forces were modern-day crusaders desecrating holy soil, and the United 
States was replacing the collapsing Soviet Union as an enemy of Islam and a 
threat to the region. 289 

Bin Laden's war against the United States had started earlier in the decade, 
when his rhetoric may have inspired, and al Qaeda support may have facilitated, 
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several prominent jihadist attacks against U.S. persons and interests. These 
deadly operations included the December 1992 hotel bombings in Aden, Yemen; 
the February 1993 bombing, masterminded by Ramzi Yousef, of the World Trade 
Center; 290 the plot of May and June 1993, aided by Omar Ahmad Abdul Rahman, 
to destroy other landmarks in New York; the October 1993 killing of eighteen 
U.S. soldiers in the Battle of Mogadishu, Somalia; the December 1994 explo- 
sion on board a commercial jet flying from Manila to Tokyo, another of Yousef 's 
plots, which killed one passenger; the November 1995 car bombing of the Saudi 
national guard facility in Riyadh, which killed five Americans; the June 1996 
truck bombing of the U.S. sector of Khobar Towers housing complex in Dha- 
hran, Saudi Arabia, which killed nineteen members of the U.S. Air Force's 
4404th Wing (Provisional) and wounded five hundred more; and the November 
1997 suicide attack and execution- style murders of fifty-eight foreign tourists 
and four Egyptians at Queen Hatshepsut's temple near Luxor, Egypt. 291 

By mid-summer 1996, al Qaeda was focusing less on supporting terrorist 
operations carried out by allied groups and more on executing actions super- 
vised by bin Laden or his senior aides. 292 Bin Laden's fatwas, or religious rul- 
ings, of August 23, 1996 293 and February 23, 1998 294 declared war against the 
United States and his intention to launch attacks against U.S. military personnel, 
civilians, and allies anywhere in the world. Thereafter, the U.S. government be- 
came increasingly aware of bin Laden's involvement in, and al Qaeda's re- 
sponsibility for, several deadly plots against the United States. These included 
the August 1998 East Africa embassy bombings, which injured 4,500 people 
and killed 224, including 12 Americans; attacks during the millennium period in 
the United States and elsewhere, including a bombing plot against Los Angeles 
International Airport that was thwarted with the December 1999 apprehension 
of Ahmed Ressam at Port Angeles, Washington; the January 2000 aborted sui- 
cide bombing against the U.S.S. The Sullivans in Aden; and the October 2000 
suicide bombing of the U.S.S. Cole, also in Aden, which killed 17 U.S. sailors 
and injured 39 others. 295 

The 9/11 attacks were in some ways a traditional terrorist operation against 
a country that radical Islamists considered their religion's archenemy. Bin Laden 
intended them to devastate U.S. military power by destroying its founda- 
tion — the U.S. economy. 296 In an interview with the Arabic-language news net- 
work al-Jazeera in October 2001, bin Laden spoke proudly about the impact of 
the 9/11 attacks and the ruin of the World Trade Center towers: 297 "The values 
of this Western civilization under the leadership of America have been destroyed. 
Those awesome symbolic towers that speak of liberty, human rights, and hu- 
manity have been destroyed. They have gone up in smoke." 298 

Behind bin Laden's comments lay a view of history and the world that he 
shared with several generations of radical Islamists. In their moral universe, time 
is compressed. Military victories and defeats, humiliations and triumphs of cen- 
turies past, are part of their everyday outlook. 299 These notions were far removed 
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from the experience of most Americans. In a speech on September 20, 2001, to 
a joint session of Congress and the nation, President George W. Bush spoke for 
many of his fellow citizens when he asked, "[W]hy do they hate us?" 300 

In the two decades before September 2001, the threat to U.S. citizens and 
interests had grown from a brand of terrorism inspired by a fundamentalist, ex- 
treme interpretation of Islam. Its adherents viewed God-given Islamic law, 
sharia, as the sole guide for the personal conduct of individuals and for the po- 
litical behavior of governments. Islamists aimed, by violent means if necessary, 
to purify the Islamic world of what they considered the corruption, immorality, 
exploitative practices, and spiritual ignorance of non-Muslims and secular Mus- 
lims. Islamist fundamentalists generally sought to restore the caliphate and re- 
vive the religion's traditions and laws; overthrow secular, pro- Western regimes; 
destroy the Arab-Israeli peace process and the Jewish state; and expel Western 
nationals, including U.S. military personnel, from the Middle East. 301 

The forty-year period before the attacks of September 11, 2001, had seen 
increasingly deadly acts of violence carried out by international terrorist organ- 
izations against U.S. military personnel, diplomatic corps, aircraft, citizens, and 
interests overseas. In the 1970s and 1980s, such attacks were relatively infre- 
quent and of limited effect. 302 Most terrorist groups were fairly small, and they 
and their state sponsors were motivated by ideology, politics, and domestic agen- 
das. 303 In 1975, terrorism expert and RAND Corporation analyst Brian Jenkins 
wrote: "[Terrorists want a lot of people watching and a lot of people listening 
and not a lot of people dead." Two decades later, however, James Woolsey, Di- 
rector of Central Intelligence, argued: "[T]oday's terrorists don't want a seat at 
the table; they want to destroy the table and everyone sitting at it." 304 The new 
terrorists were usually not just willing but eager to kill themselves as well. 

In the intervening period, particularly after the Soviet Union's departure 
from Afghanistan in 1989, a new paradigm of terrorism had begun to emerge. 
In the 1990s, the number of terrorist attacks decreased, but casualties increased. 
The number of terrorist organizations motivated by religious concerns increased, 
and their members, disinterested in trying to win over their opponents, viewed 
violence against their enemies as a sacred act and a divine obligation. Against 
this background, mass, indiscriminate casualties became a goal. 305 

Exemplifying this new paradigm were the attacks planned or carried out 
against symbolic targets in the United States in the early 1990s by followers of 
Omar Abdul Rahman. The perpetrators, some of whom were U.S. citizens based 
largely in New Jersey, received religious sanction for their acts from Rahman, 
training or sanctuary in al Qaeda/bin Laden facilities, or financial support from 
bin Laden. 306 Their operations included the November 5, 1990, fatal shooting in 
Manhattan of Jewish extremist Meir Kahane by El-Sayyid Nosair; 307 the first 
World Trade Center bombing, on February 26, 1993, by Ramzi Yousef and other 
co-conspirators, that killed 6 people, injured 1,042 others, and caused $510 mil- 
lion in damage; 308 and the New York City landmarks multiple bomb plot, dis- 
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rupted by the Federal Bureau of Investigation on June 23, 1993, for which Rah- 
man and other defendants were later tried, convicted, and imprisoned in the 
United States. 309 

After the 1993 World Trade Center bombing, Yousef fled to the Philip- 
pines, where he was joined in the summer of 1994 by his uncle, Khalid Sheikh 
Mohammed. The two men developed Operation Bojinka, a scheme to blow up, 
over a two-day period over the Pacific Ocean, twelve passenger 747 aircraft of 
three major U.S. carriers. Investigations in the Philippines and in the United 
States later revealed that the plot also involved plans to assassinate President 
Bill Clinton, at the request of bin Laden; to murder Pope John Paul II; to bomb 
U.S. -bound cargo planes with explosive-laden jackets smuggled on board; and 
to crash an aircraft into the headquarters of the Central Intelligence Agency. 310 

The Bojinka plot, in its less well-known second wave, was later seen to 
strongly parallel the 9/11 attacks. 311 It involved Khalid Sheikh Mohammed's 
plan to crash aircraft into targets inside the United States, including, in New 
York, the World Trade Center; in the Washington, D.C. area, the Pentagon, the 
Capitol, and the White House; in San Francisco, the Transamerica Tower; in 
Chicago, the Sears Tower; and an unidentified nuclear plant. 312 The Bojinka 
scheme to send suicide operatives to train at U.S. flight schools, to comman- 
deer commercial aircraft, and to fly them into high-profile U.S. targets became 
the sine qua non of the attacks of September 11, 2001. 

In mid- 1996, not long after bin Laden arrived in Afghanistan, Khalid 
Sheikh Mohammed briefed the al Qaeda chief and his military commander, Mo- 
hammed Atef (Abu Hafs al-Masri), on several attack plans that he and his 
nephew had developed in the summer of 1994 as part of the Bojinka plot. One 
called for suicide hijackers, trained as pilots, to fly airplanes into buildings in the 
United States. Bin Laden declined the proposals, but, apparently persuaded by 
Atef, he decided in late 1998 or early 1999 to support the hijacker-pilot plot. 
The three men met several times in Kandahar in the spring of 1999 to choose tar- 
gets for what they were by then calling the "planes operation," and bin Laden 
began selecting suicide operatives. 313 

Suicide bombing attacks had sometimes been part of the old terrorism's ar- 
senal, but they were becoming, increasingly, part of the new. Al Qaeda opera- 
tives commonly referred to suicide attacks as "martyrdom operations." 314 Those 
who volunteered for the missions believed that they were carrying out religiously 
justifiable — even obligatory — actions for their faith. 315 The notion of training 
suicide operatives to kill a passenger jet's flight crew, to take over the controls, 
and then to use the commandeered plane as a guided missile was in some ways 
an innovation. However, earlier terrorists had hijacked or attempted to hijack 
commercial aircraft intending to crash them into cities. 316 

The first attempt to use a commercial aircraft as a weapon occurred on 
September 5, 1986, by Palestinian suicide operatives hired by Libyan dictator 
Muammar Qaddafi to hijack Pan American Flight 73 and explode it over Tel 
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Aviv, Israel. 317 There were also cases in the United States of disturbed or dis- 
gruntled individuals such as Samuel Joseph Byck who, on February 22, 1974, 
tried to hijack Delta Airlines Flight 523 and force its pilot to crash the plane into 
the White House to assassinate President Richard M. Nixon. 318 Two decades 
later, in 1994, three other incidents received wide media coverage. The first, on 
April 7, involved Auburn Calloway, a Federal Express employee facing a disci- 
plinary hearing, who assaulted the cockpit crew of FedEx Flight 705 in an at- 
tempt to gain control of the aircraft and crash it into a FedEx building in 
Memphis, Tennessee. 319 In the second, on the night of September 11/12, Frank 
Eugene Corder flew a stolen Cessna under radar in an attempt to crash the plane 
into the White House. 320 In the third, on December 24, four members of a sub- 
group of an Algerian terrorist organization, the Armed Islamic Group, stormed 
Air France Flight 8969, awaiting takeoff in Algiers. 321 After the hijackers killed 
three hostages, Algerian authorities allowed the flight to take off. The hijackers 
rigged the Airbus A300 with explosives and ordered it flown to Marseille and 
loaded with twenty-seven tons of fuel, about three times more than what would 
be required to fly to Paris, their proposed destination. On the ground at Mar- 
seille, the hijackers killed a fourth hostage on December 26. French antiterror- 
ism commandos then stormed the plane, killing the hijackers and freeing the 
passengers. French investigators learned from the surviving hostages and from 
other sources that the hijackers had planned to blow up the aircraft over Paris or 
crash it into the Eiffel Tower. 322 Ramzi Yousef was alleged to have ties to the 
Armed Islamic Group, and Philippine investigators reportedly found a copy of 
Time magazine's cover story on the foiled attack among his possessions when 
they searched his Manila bomb-factory apartment in January 1995. 323 

Throughout the 1990s, it became more apparent that al Qaeda was a per- 
sistent and formidable adversary; that bin Laden had a longstanding intention to 
take his war to the United States; and that targets in New York City and the 
Washington, D.C., area were of particular interest. 324 

Al Qaeda's increasingly ambitious attacks against U.S. persons and inter- 
ests were similar to those that Rahman called for at the beginning of the 
decade. 325 Officials in the Kahane murder investigation discovered a notebook 
of Nosair's, dated not later than 1990, that showed Rahman's possible inspira- 
tion for the World Trade Center attacks of 1993 and 2001. In it, a passage, prob- 
ably copied from a speech by Rahman, called for "[t]he breaking and destruction 
of the enemies of Allah ... by means of destroying exploding [sic], the struc- 
ture of their civilized pillars such as the touristic infrastructure which they are 
proud of and their high world buildings which they are proud of and their stat- 
ues which they endear [sic] and the buildings [in] which gather their head[s], 
their leaders " 326 

The evidentiary trail left after the first World Trade Center bombing in 
1 993327 anc j a remar k by Ramzi Yousef also suggested that al Qaeda intended to 
attack targets in New York City and to return most particularly to the World 
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Trade Center. Following his capture in Pakistan on February 7, 1995, Yousef 
was transferred that day to the United States on board a U.S. Air Force aircraft. 328 
Authorities then flew him on an FBI helicopter to the Metropolitan Correctional 
Center in lower Manhattan. Along the way, an accompanying SWAT man had 
Yousef 's blindfold removed and said, as they were flying alongside the World 
Trade Center, "You see, it's still standing." Yousef replied, "It wouldn't be if we 
had had more money." 329 

The destruction of the twin towers, for which Yousef had hoped and 
planned, was realized in the "planes operation" proposed by Khalid Sheikh Mo- 
hammed, supported by Mohammed Atef, and accepted by bin Laden. When the 
three men met in the spring of 1999 to select targets, Khalid Sheikh Mohammed 
suggested the World Trade Center, to complete the work his nephew had 
begun. 330 This time, the attackers would have more money. The appeal of the 
World Trade Center towers as targets for Islamist terror was constant and inal- 
terable, from Rahman's call in 1990 to explode America's "civilized pillars" and 
"high world buildings" until Mohammed Atta and Marwan al-Shehhi crashed 
American Airlines Flight 11 and United Airlines Flight 175 into them on the 
morning of September 11, 2001. 

Atef was killed in a U.S. air strike near Kabul, Afghanistan, in November 
2001 ; 331 Khalid Sheikh Mohammed was captured in Rawalpindi, Pakistan, in 
March 2003 and was then held in U.S. custody at Guantanamo Bay, Cuba; 332 
and bin Laden was killed in Abbottabad, Pakistan, by U.S. Special Forces in 
May 2011. 333 Al Qaeda's general command announced in mid-June 2011 that 
Ayman al-Zawahiri (b. 1951), bin Laden's longtime deputy, would take over as 
head of the network. 334 Despite these and other losses and almost ten years after 
the 9/11 hijackings, al Qaeda and allied groups remained keenly interested in at- 
tacking high-value U.S. targets, including commercial aviation. A dual U.S.- 
Yemeni citizen, Anwar al-Awlaki, and the Yemen-based organization, Al Qaeda 
in the Arabian Peninsula (AQAP), 335 were linked to the Christmas Day 2009 at- 
tempted bombing of Northwest Airlines Flight 235 over Detroit by Umar Farouk 
Abdulmutallab; to the October 2010 bomb plot against U.S. and other cargo and 
passenger planes; and to the May 2010 failed car bombing in New York City's 
Times Square by another U.S. citizen, Faisal Shahzad. 336 Al-Awlaki had also 
been linked to three of the hijackers of American Airlines Flight 77 and to Nidal 
Malik Hasan, later a U.S. Army major and psychiatrist accused of thirteen counts 
of premeditated murder in the November 2009 massacre at Fort Hood, Texas. 337 

A decade after the attacks of September 11, 2001, the "new type of war" 
that confronted NEADS air defenders that morning and the resulting new mis- 
sion for U.S. Air Force pilots, the possible shoot-down of a U.S. passenger air- 
craft, were no longer new. Given the continuing and evolving terrorist threat 
against aviation, it was unlikely that either the war or the mission would end in 
the near future. 
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NORAD Air Defense Structure on 9/11 



NORAD 
North American Aerospace 
Defense Command 
Peterson AFB 
Colorado Springs, CO 
Gen. Ralph E. Eberhart 



ANR 

Alaska NORAD Region 
Lt. Gen. 
Norton A. Schwartz 




CANR 
Canadian NORAD Region 
Maj. Gen. Steven Lucas 




CONR 
Continental U.S. NORAD 
Region 
Tyndall AFB 
Panama City, FL 
Maj. Gen. Larry K. Arnold 







First Air Force 
Tyndall AFB, FL 
Maj. Gen. Larry K. Arnold 
[ANG air defense units] 



NEADS 

Northeast 
Air Defense Sector 

Rome, NY 
Col. Robert K. Marr 



SEADS 
Southeast 
Air Defense Sector 
Tyndall AFB, FL 
Col. Larry L. Kemp 



WADS 
Western 
Air Defense Sector 
McChord AFB, WA 
Col. John L. Cromwell 



Source: Leslie Filson, Air War Over America: Sept. 11 alters [sic: the] face o/[sic: the] air defense mission 
(Tyndall Air Force Base, Fla.: Headquarters 1st Air Force, Public Affairs Office, 2003), pp v, 5, 6, 24, 34, 42, 
50, 52, and 71. 
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Timing of FAA Notification to NORAD's Northeast Air Defense Sector 

(all times are EDT) 


Flight and Event 


American Airlines 
Flight 11 


United Airlines 
Flight 175 


American Airlines 
Flight 77 


United Airlines 
Flight 93 


Last routine communi- 
cation 


Just before 0814 


0842 


0851 


0927 


First sign of trouble 


0814 or shortly 
thereafter 


0847 


0854 


0928:17 


FAA believes flight in 
distress 


0825 


0853-0855 


0856-0900 


0934 (FAAATC in 
charge of flight had 
concluded this at 
first sign of trou- 
ble) 


FAA notifies NEADS 


0837:52 


0903 


0934: FAA told 
NEADS AAL 77 
missing 


1007: FAA told 
NEADS UAL 93 
hijacked 


Fighter battle stations 
order (Otis ANGB) 


0841:32 
(2F-15s: 
Otis ANGB, 
Falmouth, MA) 








Fighter scramble order 
(Otis ANGB) 


0845:54 


See AAL 11 






Fighters airborne 
(Otis ANGB) 


0852 


See AAL 1 1 






Airline impact time 


0846:25: WTC 1 
Collapsed: 
1028:22 


0903:11: WTC 2 
Collapsed: 
0958:59 


0937:46: Pentagon 


1003:11: PA 


Elapsed time! FAA be- 
lieves flight in distress 
until FAA notifies 
NEADS 


12 minutes 52 sec- 
onds 


8 — 10 minutes 


34 — 38 minutes 


33 minutes 


Elapsed time: FAA 
notifies NEADS until 
crash 


8 minutes 33 sec- 
onds 


1 1 seconds 


3 minutes 46 sec- 
onds 


Minus 3 minutes 
49 seconds 


FAA notif ication to 
NEADS: AAL 11 still 
airborne 


0921:10 
(First mentioned 
about 0856:31) 








Fighter battle stations 
order (Langley AFB) 


0909 
(2 F-16s: Langley 
AFB, Hampton, 
VA) 








Fighter scramble order 
(Langley AFB) 


0924 
(Scramble order 
included a third 
F— 16, with guns) 








Fighters airborne 
(Langley AFB) 











Source: The 9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks Upon 
the United States (Washington, D.C.: Government Printing Office, 2004), Chapter 1, "We Have Some 
Planes" [http://www.9-llcommission .gov/report/9 llReport_Chl.pdf, accessed Aug 20, 2007]. 
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General Overview of the Four Hijacked Flights 
(all times are EDT) 




American 
Airlines 
Flight 11 


United 
Airlines 
Flight 175 


American 
Airlines 
Flight 77 


United 
Airlines 
Flight 93 


Airplane 
make/model 


Boeing 
767-223 


Boeing 
767-222 


Boeing 
757-223 


Boeing 
757-222 


Registration 
number 


N334AA 


N612UA 


N644AA 


N591UA 


Itinerary 


Boston Logan 
International Airport 
(BOS)-Los Angeles 
International Airport 
(LAX) 


Boston Logan 
International Airport 
(BOS)-Los Angeles 
International Airport 
(LAX) 


Washington Dulles 
International Airport 
(IAD)-Los Angeles 
International Airport 
(LAX) 


Newark Liberty 
International Airport 
(EWR)-San Francisco 
International Airport 
(SFO) 


Passengers 
and crew 


Passengers: 81 
(including 5 hijackers) 
Crew: 11 (9 cabin and 
2 flight deck) 
Total: 92 


Passengers: 56 
(including 5 hijackers) 
Crew: 9 (7 cabin and 
2 flight deck) 
Total: 65 


Passengers: 58 
(including 5 hijackers) 
Crew: 6 (4 cabin and 
2 flight deck) 
Total: 64 


Passengers: 37 
(including 4 hijackers) 
Crew: 7 (5 cabin and 
2 flight deck) 
Total: 44 


Scheduled 
departure time 


0745 


0800 


0810 


0800 


Push-back time 


0740 


0758 


0809 


0800 


Wheels-off time 


0759 


0814 


0820 


0842 


Impact time 


0846:25 


0903:11 


0937:46 


1003:11 


Crash site 


New York City 

WTC 1 
(North Tower) 


New York City 

WTC 2 
(South Tower) 


Arlington, VA 
Pentagon 


Shanksville, PA 
Empty field 



Source: The 9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks Upon the 
United States (Washington, D.C.: Government Printing Office, 2004), [http://www.9-ilcommission.gov/re 
port/911Report_Chl.pdf, accessed Aug 20, 2007]. 
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Table 3 

American Airlines Flight 11 and 9/11 Commission Timeline 
(all times are EDT) 


Event 


9/11 Commission Timeline 


Takeoff (wheels off) 


0759 


Last routine communication 


Just before 0814 


First sign of trouble 


Just before 0814 


Likely takeover 


0814 or shortly thereafter 


Transponder turned off 


0821™ 


Initially unintelligible transmission 
of unknown origin heard by Boston Center 
air traffic control specialist 


0824:38 


Second suspect transmission heard by Boston 
Center air traffic control specialist 


0824:57 339 


FAA believes flight in distress (hijacked) 


0825 


AAL 1 1 begins southbound turn over Albany, NY 


0826 340 


Third suspect transmission heard by Boston Center 
air traffic control specialist and his section 


0834 341 


FAA notifies NEADS 


0837:52 


Fighter scramble order: 2 F-15s from Otis ANGB, 
Falmouth, MA 


0845:54 


Fighters airborne, Otis ANGB 


0852 


Airline impact time: WTC 1 


0846:25 


Elapsed time: FAA believes flight in distress 
(hijacked) until FAA notifies NEADS 


12 minutes 52 seconds 


Elapsed time: FAA notification to 
NEADS until crash 


8 minutes 33 seconds 


FAA notification to NEADS: AAL 11 still airborne 


0921:10 


Fighter scramble order: 2 F-16s from Langley 
AFB, Hampton, VA. Scramble order 
included third aircraft 


0924 


Fighters airborne, Langley AFB 


0930 



Source: The 9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks 
Upon the United States (Washington, D.C.: Government Printing Office, 2004), [http://www.9-llcom 
mission.gov/re port/9 11 Report_Chl.pdf, accessed Aug 20, 2007]; Miles Kara, e-mails to P. D. Jones, 
Jun 6, 2011,5:36 p.m. and 10:19 p.m. EDT; and Jun 7, 2011, 1:20 p.m. EDT. 
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Table 4 

United Airlines Flight 175 and 9/11 Commission Timeline 
(all times are EDT) 


Event 


U ill ■ £ \ »"V1 TV! 1 r < ' 1 i < n I I 1 1 ~l / « / \ 

y/ii oniimssion iimenne 


Takeoff (wheels off) 


0814 


Last routine communication 


0842 


First sign of trouble 


0847 


Transponder code changed 


0847 


FAA believes flight in distress 


0853-0855 


FAA notifies NEADS 


0903 


Fighter scramble order 


SeeAAL 11 


Fighter airborne: Otis ANGB 


SeeAAL 11 


Airline impact time: WTC 2 


0903:11 


Elapsed time: FAA believes flight in distress 
until FAA notifies NEADS 


8-10 minutes 


Elapsed time: FAA notification to NEADS 
until crash 


11 seconds 



Source: The 9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks 
Upon the United States (Washington, D.C.: Government Printing Office, 2004), [http://www.9-llcom 
mission.gov/re port/91 lReport_Chl.pdf, accessedAug 20, 2007]. 
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Table 5 

American Airlines Flight 77 and 9/11 Commission Timeline 
(all times are EDT) 


Event 


9/11 Commission Timeline 


Takeoff (wheels off) 


0820 


Last routine communication 


0851 


First sign of trouble 


0854 


Transponder turned off 


0856 


FAA believes flight in distress 


0856-0900 


FAA notifies NEADS 


0934: FAA told NEADS AAL 77 missing 


Fighter scramble order 




Fighters airborne 




Airline impact time: Pentagon 


0937:46 


Elapsed time: FAA believes flight in distress 
until FAA notifies NEADS 


34-38 minutes 


Elapsed time: FAA notification to NEADS 
until crash 


3 minutes 46 seconds 



Source: The 9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks 
Upon the United States (Washington, D.C.: Government Printing Office, 2004), [http://www.9- llcom 
mission.gov/re port/91 lReport_Chl.pdf, accessed Aug 20, 2007]. 
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Table 6 

United Airlines Flight 93 and 9/11 Commission Timeline 
(all times are EDT) 


Event 


9/11 Commission Timeline 


Takeoff (wheels off) 


0842 


Last routine communication 


0926-0927 


First sign of trouble 


0928:17 


FAA believes flight in distress 


0934 


Transponder turned off 


0941 


FAA notifies NEADS 


1007: FAA told NEADS UAL 93 hijacked 


Fighter scramble order 




Fighters airborne 




Airline impact time: Shanksville, PA 


1003:11 


Elapsed time: FAA believes flight in distress 
until FAA notifies NEADS 


33 minutes 


Elapsed time: FAA notification to NEADS 
until crash 


Minus 3 minutes 49 seconds 



Source: The 9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks 
Upon the United States (Washington, D.C.: Government Printing Office, 2004), [http://www.9- llcom 
mission.gov/re port/91 lReport_Chl.pdf, accessed Aug 20, 2007]. 
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Notes 



1. Government officials, academics, linguists, and journalists often spell Arabic names differ- 
ently. Even the same government department, for example, may render Osama bin Laden's network as 
"al Qaeda" in one text and as "al-Qaeda" in another. Similarly, "Osama" may appear as "Usama" and 
"bin Laden" as "bin Ladin." In this publication, "al Qaeda" and "Osama bin Laden" are used. 

2. Lawrence Wright, The Looming Tower: Al-Qaeda and the Road to 9/11 (New York: Alfred 
A. Knopf, 2007), pp 72 and 393-94 (endnote for p 72 about the lack of definitive information on bin 
Laden's date of birth). The White House, President Barack H. Obama, Office of the Press Secretary, 
Remarks by the President on Osama Bin Laden, The White House, East Room, Washington, D.C., May 
2, 2011, 11:35 p.m. EDT [http://www.whitehouse.gov/the-press-office/2011/05/02/remarkspresident-osama- 
bin-laden, accessed May 2, 2011.] 

3. Wright, The Looming Tower, pp 235-36, 307-308. 

4. Dan Eggen and Vernon Loeb, "U.S. Intelligence Points To Bin Laden Network," Washing- 
ton Post, Sep 12, 2001, p Al. 

5. Early in the afternoon of Sep 11, 2001, Senator Chuck Hagel (R-Neb.) told reporters that the 
9/1 1 attacks were "the second Pearl Harbor." Direct quote of Hagel in Jake Tapper, "Bush, Challenged," 
Salon.com, Sep 12, 2001. [http://www.salon.com/politics/feature/2001/09/ll/bush/print.html, accessed 
Jun 12, 2008.] 

6. Michael Grunwald, "Bush Promises Retribution; Military Put on Highest Alert," Washing- 
ton Post, Sep 12, 2001, p Al. 

7. Data on the security of the U.S. civil aviation system from Staff Monograph on the Four 
Flights and Civil Aviation Security, 9/11 Commission Staff Report dated Aug 26, 2004, 2d version, re- 
leased by the U.S. Department of Justice on Sep 12, 2005, Part II: "Civil Aviation Security and the 
9/11 Attacks" (hereinafter Staff Monograph, Part II), p 53f, and p 102, endnote 426. [http://www. 
archives.gov/ legislative/research/9-1 l/staff-report-sept2005.pdf, accessed Mar 3, 2008.] (The second 
version contains less redacted information than the first version, which was released on Jan 28, 2005.) 
Additional general information from Michael Bronner, "9/11 Live: The NORAD Tapes," Vanity Fair, 
Aug 2006 [http://www.vanityfair.com/politics/features/2006/08/norad200608, accessed May 1,2008]; 
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p.m. EDT [http://archives.cnn.com/2001/US/09/ 1 1/chronology.attack/index.html, accessed Sep 5, 
2007]; Andrea Stone, "Pentagon's 'Primary Mission' Now Homeland Defense," USA Today, Sep 30, 
2001, updated 10:07 p.m. E[D]T [http://www.usa today.com/news/septll/2001/09/30/pentagon-re- 
view.htm, accessed Jul 9, 2008] ; and Quadrennial Defense Review Report, Department of Defense, 
Sep 30, 2001 [http://www.comw.org/qdr/qdr2001.pdf, accessed Jul 9, 2008]; Dana Milbank, "White 
House Staff Switches Gears," Washington Post, Sep 17, 2001, p 25. General information from The 
9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks Upon the 
United States (hereinafter The 9/11 Commission Final Report) (Washington, D.C.: Government Print- 
ing Office, 2004), pp 4, 14, 32, and 33 and p 452, endnote 24, citing NTSB [National Transportation 
and Safety Board] report, "Air Traffic Control Recording — American Airlines Flight 11," Dec 21, 
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8. The 9/11 Commission Final Report, p 46 (direct quotation of Bianchi) and p 466, endnote 241, 
citing NEADS audio file, Identification Technician [ID Tech] position, recorder 1, channel 4, 10:02:22 
[a.m. EDT]. In another source, Bianchi's words are rendered as "A new type of war, that's what it is." 
Direct quote from "9/1 1 NEADS Tape Transcription, DRM 1, DAT 2, Channel 4, ID Op," transcribed 
by Janet S. Dickens from the audiotapes provided [by the 9/11 Commission] to Alderson Reporting, p 
39. N.d. [http://www.scribd.com/doc/14 142075/NYC-Box-3-Neadsconrnorad-Fdr-Transcript-Neads- 
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commander technician (MCC Tech) on Sep 1 1 , 200 1 . National Commission on Terrorist Attacks Upon 
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Gregor, "Specialist's Report," Air Traffic Control Recording: American Airlines Flight 11, Dec 21, 
2001. National Transportation Safety Board, Vehicle Recorders Division, Washington, D.C. The Na- 
tional Security Archive, The September 1 1 th Sourcebooks, National Security Archive Electronic Brief- 
ing Book (hereinafter NSAEBB) No. 196, posted Aug 11, 2006, Document 5. [http://www.gwu.edu/ 
-nsarchiv/NSAEBB/NSAEBB 196Moc05.pdf, accessed Apr 30, 2008.] 

340. Precise time not mentioned in The 9/11 Commission Final Report. Source here is Depart- 
ment of Transportation, Federal Aviation Administration, "Summary of Air Traffic Hijack Events, Sep- 
tember 11, 2001," Sep 17, 2001, 6:30 a.m. The National Security Archive, The September 11th 
Sourcebooks, NSAEBB No. 165, posted Sep 9, 2005, Document 7. [http://www.gwu. edu/~ nsarchiv/ 
NSAEBB/NSAEBB 165/faa7.pdf, accessed Apr 24, 2009.] Time shown as 08:26:30 a.m. EDT in Jim 
Ritter, Chief, Vehicle Perf ormance Division, "Flight Path Study — American Airlines Flight 11," Feb 
19, 2002. National Transportation Safety Board, Office of Research and Engineering, Washington, 
D.C. The National Security Archive, The September 1 1 th Sourcebooks, NSAEBB No. 1 96, posted Aug 
11, 2006, Document 1. [http://www.gwu.edu/~nsarchiv/NSAEBB/NSAEBB196/doc01.pdf, accessed 
Apr 30, 2008.] 

341. Time shown as 1233:59 [UTC] [0833:59 a.m. EDT] in Gregor, "Specialist's Report," ATC 
Recording: American Airlines Flight 11, NTSB, NSAEBB No. 196, Doc 5. 
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